Skip to content
OpenAdvisories

Vendor

squid-cache

19 known vulnerabilities.

Products

squid 19
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-47729 Public exploit

    Squid: Memory disclosure in FTP gateway

    Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB d…

    squid-cache squid squid squid3 Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2025-62168 Public exploit EPSS 65%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Alpine
  • Critical 9.3
    CVE-2025-54574 Public exploit EPSS 22%

    Squid's URN Handling can lead to Buffer Overflow

    Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around…

    squid-cache squid squid squid3 Debian Ubuntu