Login Request a demo
SQ
Product
Squidex
by Squidex.io · last CVE Jan 27, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 2Medium 7Low 0
Severity
All severities9Critical0High2Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Squidex to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24736
8.8
0%
Jan 27
Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration
Affected: through 7.21.0
CVE-2023-46253
7.2
2%
Nov 7
Squidex is an open source headless CMS and content management hub
Affected: 7.8.2
CVE-2023-0642
6.5
0%
Feb 2
Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0
Affected: before 7.4.0
CVE-2023-46252
6.1
0%
Nov 7
Squidex is an open source headless CMS and content management hub
Affected: 7.8.2
CVE-2023-24278
6.1
3%
Mar 18
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability
Affected: before 7.4.0
CVE-2023-0643
6.1
1%
Feb 2
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0
Affected: before 7.4.0
CVE-2023-46857
5.4
1%
Dec 7
Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature
Affected: before 7.9.0
CVE-2023-46744
5.4
0%
Nov 7
Squidex is an open source headless CMS and content management hub
Affected: through 7.8.2
CVE-2023-3580
4.3
1%
Jul 10
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0
Affected: before 7.4.0
Showing 9