Squirrel-lang Squirrel — known CVE vulnerabilities

Every CVE whose affected-product data names Squirrel-lang Squirrel, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-30292 — CVSS 10.0 (critical): Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.
• CVE-2021-41556 — CVSS 10.0 (critical): sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code…
• CVE-2026-9541 — CVSS 5.3 (medium): A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the…
• CVE-2026-3389 — CVSS 3.3 (low): A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library…
• CVE-2026-2661 — CVSS 3.3 (low): A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library…
• CVE-2026-2659 — CVSS 3.3 (low): A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file…
• CVE-2026-3388 — CVSS 3.3 (low): A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file…