Known Vulnerabilities for Wire by Squareup
Listed below are 1 of the newest known vulnerabilities associated with "Wire" by "Squareup".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115938 json | Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluat... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115477 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Stre... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-114654 json | A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subtype va... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114646 json | A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an applicatio... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114605 json | dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114136 json | Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-112008 json | libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt ... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-107908 json | A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a rem... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-106435 json | The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containin... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-105941 json | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without for... | Not Provided | 2026-10-20 | 2026-10-20 |