Squidex vulnerabilities

CVEs per yearBy the year they were published

1. 20236
2. 20265

Newest CVEs

• CVE-2026-41177

  Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction

  Squidex · squidex

  Medium5.5
• CVE-2026-41172

  Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)

  Squidex · squidex

  High7.3
• CVE-2026-41171

  SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient

  Squidex · squidex

  High7.3
• CVE-2026-41170

  Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests

  Squidex · squidex

  High7.2
• CVE-2026-24736

  Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration

  Squidex · squidex

  Critical9.1
• CVE-2023-46252

  Cross-Site Scripting (XSS) via postMessage Handler in Squidex

  Squidex · squidex

  Medium6.8
• CVE-2023-46253

  Remote code execution in Squidex

  Squidex · squidex

  Critical9.1
• CVE-2023-46744

  Stored Cross-site Scripting in Squidex

  Squidex · squidex

  Medium5.4
• CVE-2023-3580

  Improper Handling of Additional Special Element in squidex/squidex

  squidex · squidex/squidex

  Medium5.4
• CVE-2023-0643

  Improper Handling of Additional Special Element in squidex/squidex

  squidex · squidex/squidex

  Medium5.4