Skip to content
OpenAdvisories
Critical DSA-6047-1 1 CVE

squid - security update

Published Oct 30, 2025 · Updated Oct 30, 2025

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 12 squid 5.7-2+deb12u4
Debian · 13 squid 6.13-2+deb13u1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine