Skip to content

Vendor

squidowl vulnerabilities

2 published CVES affecting squidowl, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of squidowl alerts

Products

Latest squidowl CVEs

Newest publication first

  1. CVE-2026-32810 Halloy has insecure file permissions on credential files

    Published
    MediumCVSS 4.8 EPSS 0.19%

    Halloy is an IRC application written in Rust. In versions on *nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates its config directory and files using default umask permissions, which typically results in 0644 on files and 0755 on directories. T...

  2. CVE-2026-32733 Halloy has a file transfer path traveral vulnerability

    Published
    HighCVSS 8.7 EPSS 0.42%

    Halloy is an IRC application written in Rust. Prior to commit 0f77b2cfc5f822517a256ea5a4b94bad8bfe38b6, the DCC receive flow did not sanitize filenames from incoming DCC SEND requests. A remote IRC user could send a filename with path traversal sequences like ../../.ssh/authorize...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.