Vulnerabilities
NVD Rates Square Squash YAML Flaw Critical 9.2 CVSS Score for Unauthenticated RCE
Unauthenticated attackers can exploit CVE-2026-109391 to execute arbitrary Ruby code in Square Squash via crafted YAML input.
deserialization
Everything TechSec Observer has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
NVD Assigns 9.8 Score to ThemeREX Dwell Deserialization Weakness Enabling Object Injection
A deserialization weakness in ThemeREX Group Dwell allows object injection, rated 9.8 CVSS by the NVD for versions through 1.16.0.