SQ
Vendor
Squareup
13
CVEs
0
On KEV
0
New 30D
Products
OK5.9
Okhttp
Squareup
3 CVEs0 on KEV0 new
GI9.8
Git-fastclone
Squareup
2 CVEs0 on KEV0 new
RE9.1
Retrofit
Squareup
2 CVEs0 on KEV0 new
CJ3.3
Connect Java Software Development Kit
Squareup
1 CVEs0 on KEV0 new
OK5.9
Okhttp-brotli
Squareup
1 CVEs0 on KEV0 new
OK5.9
Okhttp3
Squareup
1 CVEs0 on KEV0 new
OK7.5
Okio
Squareup
1 CVEs0 on KEV0 new
SQ9.8
Squalor
Squareup
1 CVEs0 on KEV0 new
WI7.5
Wire
Squareup
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45799 | WI Wire Squareup | 7.5 | Jul 17 | Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service |
| CVE-2023-0833 | OK Okhttp Squareup | 5.5 | Sep 27 | A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an… |
| CVE-2023-3782 | OK Okhttp-brotli Squareup | 5.9 | Jul 19 | DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP… |
| CVE-2023-3635 | OK Okio Squareup | 7.5 | Jul 12 | GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer |
| CVE-2020-36645 | SQ Squalor Squareup | 9.8 | Jan 7 | A vulnerability, which was classified as critical, was found in square squalor |
| CVE-2021-23331 | CJ Connect Java Software Development Kit Squareup | 3.3 | Feb 3 | This affects all versions of package com.squareup:connect |
| CVE-2018-20200 | OK Okhttp Squareup | 5.9 | Apr 18 | CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking… |
| CVE-2018-1000850 | RE Retrofit Squareup | 7.5 | Dec 20 | Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can… |
| CVE-2018-1000844 | RE Retrofit Squareup | 9.1 | Dec 20 | Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An… |
| CVE-2016-2402 | OK Okhttp Squareup | 5.9 | Jan 30 | OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned… |
| CVE-2015-8969 | GI Git-fastclone Squareup | 9.8 | Nov 3 | git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command |
| CVE-2015-8968 | GI Git-fastclone Squareup | 8.8 | Nov 3 | git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules |