What’s Vulnerable › Products
Squid vulnerabilities
112 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your Squid version is affected
Latest Squid vulnerabilities
- CVE-2026-61642 — Squid Request Smuggling in HTTP Transfer-Encoding (CVSS 7.7)
- CVE-2026-50012 — Squid: Memory corruption in cache_digest reply handling (CVSS 5.5)
- CVE-2026-47729 — Squid: Memory disclosure in FTP gateway (CVSS 6.5)
- CVE-2026-33526 — Squid vulnerable to Denial of Service in ICP Request handling (CVSS 7.5)
- CVE-2026-33515 — Squid has issues in ICP message handling (CVSS 6.5)
- CVE-2026-32748 — Squid has Denial of Service in ICP Response handling (CVSS 7.5)
- CVE-2025-62168 — Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVSS 7.5)
- CVE-2025-59362 — (CVSS 4.0)
- CVE-2025-54574 — Squid's URN Handling can lead to Buffer Overflow (CVSS 9.8)
- CVE-2024-45802 — Squid Denial of Service (CVSS 7.5)
- CVE-2024-37894 — Squid vulnerable to heap corruption in ESI assign (CVSS 6.3)
- CVE-2024-25111 — SQUID-2024:1 Denial of Service in HTTP Chunked Decoding (CVSS 7.5)
- CVE-2024-25617 — Denial of Service in HTTP Header parser in squid proxy (CVSS 7.5)
- CVE-2024-23638 — SQUID-2023:11 Denial of Service in Cache Manager (CVSS 6.5)
- CVE-2023-50269 — SQUID-2023:10 Denial of Service in HTTP Request parsing (CVSS 7.5)
- CVE-2023-49288 — Denial of Service in HTTP Collapsed Forwarding in Squid (CVSS 7.5)
- CVE-2023-49286 — Denial of Service in Helper Process management (CVSS 7.5)
- CVE-2023-49285 — Denial of Service in HTTP Message Processing in Squid (CVSS 7.5)
- CVE-2023-46728 — SQUID-2021:8 Denial of Service in Gopher gateway (CVSS 7.5)
- CVE-2023-5824 — Squid: dos against http and https (CVSS 7.5)
- CVE-2023-46848 — Squid: denial of service in ftp (CVSS 7.5)
- CVE-2023-46847 — Squid: denial of service in http digest authentication (CVSS 7.5)
- CVE-2023-46846 — Squid: request/response smuggling in http/1.1 and icap (CVSS 5.3)
- CVE-2023-46724 — SQUID-2023:4 Denial of Service in SSL Certificate validation (CVSS 7.5)
- CVE-2022-41318 — (CVSS 8.6)