Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

squid-cache — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting squid-cache. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Squid-cache serves as a widely deployed caching proxy and web content accelerator, primarily used to improve network performance by reducing bandwidth consumption and improving response times. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 16 recorded CVEs. Notable security characteristics include its exposure to buffer overflows and authentication bypasses, with several critical flaws allowing unauthenticated attackers to execute arbitrary code or gain elevated privileges. Major incidents often involve misconfigurations leading to information disclosure or server compromise, highlighting the importance of proper deployment and regular updates for maintaining secure operation.

Top products by squid-cache: squid
CVE IDTitleCVSSSeverityPublished
CVE-2026-33526 Squid vulnerable to Denial of Service in ICP Request handling — squidCWE-416 7.5 -2026-03-26
CVE-2026-33515 Squid has issues in ICP message handling — squidCWE-125 5.3 -2026-03-26
CVE-2026-32748 Squid has Denial of Service in ICP Response handling — squidCWE-413 7.5 -2026-03-26
CVE-2025-62168 Squid vulnerable to information disclosure via authentication credential leakage in error handling — squidCWE-209 10.0 Critical2025-10-17
CVE-2025-54574 Squid's URN Handling can lead to Buffer Overflow — squidCWE-122 9.3 Critical2025-08-01
CVE-2024-45802 Squid Denial of Service — squidCWE-20 7.5 High2024-10-28
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign — squidCWE-787 6.3 Medium2024-06-25
CVE-2024-25111 SQUID-2024:1 Denial of Service in HTTP Chunked Decoding — squidCWE-674 8.6 High2024-03-06
CVE-2024-25617 Denial of Service in HTTP Header parser in squid proxy — squidCWE-400 5.3 Medium2024-02-14
CVE-2024-23638 SQUID-2023:11 Denial of Service in Cache Manager — squidCWE-825 6.5 Medium2024-01-23
CVE-2023-50269 SQUID-2023:10 Denial of Service in HTTP Request parsing — squidCWE-674 8.6 High2023-12-14
CVE-2023-49285 Denial of Service in HTTP Message Processing in Squid — squidCWE-126 8.6 High2023-12-04
CVE-2023-49286 Denial of Service in Helper Process management — squidCWE-617 8.6 High2023-12-04
CVE-2023-49288 Denial of Service in HTTP Collapsed Forwarding in Squid — squidCWE-416 8.6 High2023-12-04
CVE-2023-46728 SQUID-2021:8 Denial of Service in Gopher gateway — squidCWE-476 7.5 High2023-11-06
CVE-2023-46724 SQUID-2023:4 Denial of Service in SSL Certificate validation — squidCWE-125 8.6 High2023-11-01

This page lists every published CVE security advisory associated with squid-cache. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.