CVE-2026-109391 - Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API
CVE ID :CVE-2026-109391 Published : Oct. 12, 2026, 3:16 p.m. | 15 minutes ago Description :Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symbolication endpoint. When...