SQUIP vulnerability