CPE
Square Squash through commit e73f280 is vulnerable to insecure deserialization via the /api/1.0/symbolication endpoint, allowing unauthenticated attackers to achieve arbitrary Ruby object deserialization and potential remote code execution.