<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: squidex</title><description>Every new CVE for squidex.</description><link>https://agentprime.io/</link><item><title>CVE-2026-41177: Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction</title><link>https://agentprime.io/advisories/CVE-2026-41177/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41177/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 21:24:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41172: Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)</title><link>https://agentprime.io/advisories/CVE-2026-41172/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41172/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 21:22:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41171: SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on &quot;Jint&quot; HttpClient</title><link>https://agentprime.io/advisories/CVE-2026-41171/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41171/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 21:16:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41170: Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests</title><link>https://agentprime.io/advisories/CVE-2026-41170/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41170/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 21:13:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24736: Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration</title><link>https://agentprime.io/advisories/CVE-2026-24736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24736/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Jan 2026 20:54:51 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-46252: Cross-Site Scripting (XSS) via postMessage Handler in Squidex</title><link>https://agentprime.io/advisories/CVE-2023-46252/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46252/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Nov 2023 19:00:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-46253: Remote code execution in Squidex</title><link>https://agentprime.io/advisories/CVE-2023-46253/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46253/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Nov 2023 18:56:21 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-46744: Stored Cross-site Scripting in Squidex</title><link>https://agentprime.io/advisories/CVE-2023-46744/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46744/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Nov 2023 17:22:25 GMT</pubDate><category>CVE</category></item></channel></rss>