Squid Cache Security Vulnerabilities (CVEs)
Track 10 security vulnerabilities affecting Squid Cache products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.
Squid caching proxy versions before 7.2 fail to properly redact HTTP authentication credentials in error messages, allowing information disclosure. Th...
Oct 17, 2025Squid caching proxy versions 6.3 and below contain a heap buffer overflow vulnerability in URN processing that could allow remote attackers to execute...
Aug 1, 2025This vulnerability in Squid proxy allows trusted servers to cause denial of service against all clients using the proxy through resource management fl...
Oct 28, 2024Squid caching proxy versions 6.0.1 through 6.9 and 5.0.5 through 5.9 are vulnerable to memory corruption due to an out-of-bounds write error when assi...
Jun 25, 2024CVE-2024-25111 is an uncontrolled recursion vulnerability in Squid's HTTP chunked decoder that allows remote attackers to cause denial of service by s...
Mar 6, 2024Squid caching proxy versions 2.6 through 6.5 contain an uncontrolled recursion vulnerability in HTTP request parsing when the follow_x_forwarded_for f...
Dec 14, 2023Squid caching proxy versions before 6.5 contain an incorrect check of function return value bug in helper process management that allows denial of ser...
Dec 4, 2023Squid proxy server is vulnerable to a denial-of-service attack where remote attackers can crash the service by sending specially crafted ftp:// URLs i...
Nov 3, 2023A vulnerability in Squid proxy server allows cached HTTP response headers to exceed configured size limits, causing worker process stalls or crashes w...
Nov 3, 2023CVE-2023-46846 is an HTTP request smuggling vulnerability in Squid proxy due to lenient chunked decoder handling. It allows attackers to bypass securi...
Nov 3, 2023Why Monitor Squid Cache Security Vulnerabilities?
Real-time CVE tracking: Our automated system monitors 10+ known vulnerabilities affecting Squid Cache products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.
Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Squid Cache packages in under 60 seconds. No agents required - completely agentless scanning that works across Squid Cache deployments.
Free vulnerability database: Access detailed information about every Squid Cache CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.
🚀 Get Started in 60 Seconds
- Register free account & add your servers
- Run one-time scan or schedule automatic monitoring (every 1-24 hours)
- Receive instant alerts when new Squid Cache CVEs affect your systems
- Access dashboard with severity breakdown & fix instructions