Advisories · Technology

squid.

Every CVE that names squid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-61642 CVE record

CVSS 7.7 High

Squid Request Smuggling in HTTP Transfer-Encoding
- squid
- HTTP request smuggling
Not analysed yet 13 Oct 2026
CVE-2026-47729 CVE record

CVSS 6.5 Medium

Squid: Memory disclosure in FTP gateway
- squid
- Memory corruption
- CWE-1289
Not analysed yet 16 Jul 2026
CVE-2026-50012 CVE record

CVSS 5.5 Medium

Squid: Memory corruption in cache_digest reply handling
- squid
- Memory corruption
- CWE-20
Not analysed yet 16 Jul 2026
CVE-2026-33526 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Squid vulnerable to Denial of Service in ICP Request handling
- squid
- Memory corruption
- CWE-826
Not analysed yet 26 Mar 2026
CVE-2026-33515 CVE record

CVSS 6.9 Medium

Squid has issues in ICP message handling
- squid
- Memory corruption
- CWE-1289
Not analysed yet 26 Mar 2026
CVE-2026-32748 CVE record

CVSS 8.7 High

Squid has Denial of Service in ICP Response handling
- squid
- Memory corruption
- CWE-413
Not analysed yet 26 Mar 2026
CVE-2025-62168 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Squid vulnerable to information disclosure via authentication credential leakage in error handling
- squid
- Information disclosure
- CWE-550
Not analysed yet 17 Oct 2025
CVE-2025-54574 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Squid's URN Handling can lead to Buffer Overflow
- squid
- Memory corruption
Not analysed yet 1 Aug 2025
CVE-2024-45802 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Squid Denial of Service
- squid
- CWE-20
Not analysed yet 28 Oct 2024
CVE-2024-37894 CVE record

CVSS 6.3 Medium

Squid vulnerable to heap corruption in ESI assign
- squid
- Memory corruption
Not analysed yet 25 Jun 2024
CVE-2024-25111 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

SQUID-2024:1 Denial of Service in HTTP Chunked Decoding
- squid
- Denial of service
Not analysed yet 6 Mar 2024
CVE-2024-25617 CVE record

CVSS 5.3 Medium

Denial of Service in HTTP Header parser in squid proxy
- squid
- Denial of service
- CWE-182
Not analysed yet 14 Feb 2024
CVE-2024-23638 CVE record

CVSS 6.5 Medium

SQUID-2023:11 Denial of Service in Cache Manager
- squid
- Memory corruption
Not analysed yet 23 Jan 2024
CVE-2023-50269 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

SQUID-2023:10 Denial of Service in HTTP Request parsing
- squid
- Denial of service
Not analysed yet 14 Dec 2023
CVE-2023-49285 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Denial of Service in HTTP Message Processing in Squid
- squid
- CWE-126
Not analysed yet 4 Dec 2023
CVE-2023-49286 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Denial of Service in Helper Process management
- squid
- Denial of service
- CWE-253
Not analysed yet 4 Dec 2023
CVE-2023-49288 CVE record

CVSS 8.6 High

Denial of Service in HTTP Collapsed Forwarding in Squid
- squid
- Memory corruption
Not analysed yet 4 Dec 2023
CVE-2023-46728 CVE record

CVSS 7.5 High

SQUID-2021:8 Denial of Service in Gopher gateway
- squid
- Memory corruption
Not analysed yet 6 Nov 2023
CVE-2023-46724 CVE record

CVSS 8.6 High

SQUID-2023:4 Denial of Service in SSL Certificate validation
- squid
- Memory corruption
- CWE-129
Not analysed yet 1 Nov 2023