# squid. Every CVE that names squid among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Squid Request Smuggling in HTTP Transfer-Encoding](https://agentprime.io/advisories/CVE-2026-61642.md) `CVE-2026-61642` · CVE record: squid-cache squid · CVSS 7.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: HTTP request smuggling - [Squid: Memory disclosure in FTP gateway](https://agentprime.io/advisories/CVE-2026-47729.md) `CVE-2026-47729` · CVE record: squid-cache squid · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Memory corruption, CWE-1289 - [Squid: Memory corruption in cache_digest reply handling](https://agentprime.io/advisories/CVE-2026-50012.md) `CVE-2026-50012` · CVE record: squid-cache squid · CVSS 5.5 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Memory corruption, CWE-20 - [Squid vulnerable to Denial of Service in ICP Request handling](https://agentprime.io/advisories/CVE-2026-33526.md) `CVE-2026-33526` · CVE record: squid-cache squid · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption, CWE-826 - [Squid has issues in ICP message handling](https://agentprime.io/advisories/CVE-2026-33515.md) `CVE-2026-33515` · CVE record: squid-cache squid · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption, CWE-1289 - [Squid has Denial of Service in ICP Response handling](https://agentprime.io/advisories/CVE-2026-32748.md) `CVE-2026-32748` · CVE record: squid-cache squid · CVSS 8.7 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption, CWE-413, CWE-826 - [Squid vulnerable to information disclosure via authentication credential leakage in error handling](https://agentprime.io/advisories/CVE-2025-62168.md) `CVE-2025-62168` · CVE record: squid-cache squid · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.63 · Not analysed yet · Published 17 Oct 2025 · Tags: Information disclosure, CWE-550 - [Squid's URN Handling can lead to Buffer Overflow](https://agentprime.io/advisories/CVE-2025-54574.md) `CVE-2025-54574` · CVE record: squid-cache squid · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.22 · Not analysed yet · Published 1 Aug 2025 · Tags: Memory corruption - [Squid Denial of Service](https://agentprime.io/advisories/CVE-2024-45802.md) `CVE-2024-45802` · CVE record: squid-cache squid · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.48 · Not analysed yet · Published 28 Oct 2024 · Tags: CWE-20 - [Squid vulnerable to heap corruption in ESI assign](https://agentprime.io/advisories/CVE-2024-37894.md) `CVE-2024-37894` · CVE record: squid-cache squid · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2024 · Tags: Memory corruption - [SQUID-2024:1 Denial of Service in HTTP Chunked Decoding](https://agentprime.io/advisories/CVE-2024-25111.md) `CVE-2024-25111` · CVE record: squid-cache squid · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.65 · Not analysed yet · Published 6 Mar 2024 · Tags: Denial of service - [Denial of Service in HTTP Header parser in squid proxy](https://agentprime.io/advisories/CVE-2024-25617.md) `CVE-2024-25617` · CVE record: squid-cache squid · CVSS 5.3 Medium · EPSS 0.88 · Not analysed yet · Published 14 Feb 2024 · Tags: Denial of service, CWE-182 - [SQUID-2023:11 Denial of Service in Cache Manager](https://agentprime.io/advisories/CVE-2024-23638.md) `CVE-2024-23638` · CVE record: squid-cache squid · CVSS 6.5 Medium · EPSS 0.60 · Not analysed yet · Published 23 Jan 2024 · Tags: Memory corruption - [SQUID-2023:10 Denial of Service in HTTP Request parsing](https://agentprime.io/advisories/CVE-2023-50269.md) `CVE-2023-50269` · CVE record: squid-cache squid · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.58 · Not analysed yet · Published 14 Dec 2023 · Tags: Denial of service - [Denial of Service in HTTP Message Processing in Squid](https://agentprime.io/advisories/CVE-2023-49285.md) `CVE-2023-49285` · CVE record: squid-cache squid · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.88 · Not analysed yet · Published 4 Dec 2023 · Tags: CWE-126 - [Denial of Service in Helper Process management](https://agentprime.io/advisories/CVE-2023-49286.md) `CVE-2023-49286` · CVE record: squid-cache squid · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 4 Dec 2023 · Tags: Denial of service, CWE-253 - [Denial of Service in HTTP Collapsed Forwarding in Squid](https://agentprime.io/advisories/CVE-2023-49288.md) `CVE-2023-49288` · CVE record: squid-cache squid · CVSS 8.6 High · Not analysed yet · Published 4 Dec 2023 · Tags: Memory corruption - [SQUID-2021:8 Denial of Service in Gopher gateway](https://agentprime.io/advisories/CVE-2023-46728.md) `CVE-2023-46728` · CVE record: squid-cache squid · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2023 · Tags: Memory corruption - [SQUID-2023:4 Denial of Service in SSL Certificate validation](https://agentprime.io/advisories/CVE-2023-46724.md) `CVE-2023-46724` · CVE record: squid-cache squid · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption, CWE-129, CWE-786, CWE-823 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .