[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsFDXM2up-cjDVbcc8d87S5GKVIPb_Jmdi971QBIrScQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":85,"topProductsByCves":86,"seoMetadata":88,"meta":97},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},30164,"squid-cache",1,106,0,318,"2025-10-17","s",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},156768,"squid","Squid-cache is a technology vendor with 1 tracked product and 106 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,37,42,48,55,62,67,73,79],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2021-31806","An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.","2021-05-27",6.5,"v3.1","Medium",false,0.95785,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":36},"CVE-2023-46847","Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","2023-11-03",7.5,"High",0.88351,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":41},"CVE-2023-49285","Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.","2023-12-04",0.88144,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":47},"CVE-2024-25617","Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. In Squid version 6.5 and later, the default setting of these parameters is safe. Squid will emit a critical warning in cache.log if the administrator is setting these parameters to unsafe values. Squid will not at this time prevent these settings from being changed to unsafe values. Users are advised to upgrade to version 6.5. There are no known workarounds for this vulnerability. This issue is also tracked as SQUID-2024:2","2024-02-14",5.3,0.88094,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":27,"isKev":28,"epssScore":54},"CVE-2013-4123","client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.","2013-09-16",5,"v2",0.80451,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":35,"isKev":28,"epssScore":61},"CVE-2016-4553","client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.","2016-05-10",8.6,"v3.0",0.79969,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":66},"CVE-2021-33620","Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.","2021-05-28",0.79583,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":60,"severity":35,"isKev":28,"epssScore":72},"CVE-2016-4054","Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.","2016-04-25",8.1,0.77559,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":53,"severity":27,"isKev":28,"epssScore":78},"CVE-2014-7141","The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.","2014-11-26",6.4,0.76064,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":60,"severity":27,"isKev":28,"epssScore":84},"CVE-2019-13345","The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.","2019-07-05",6.1,0.74477,[],[87],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"Squid-cache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Squid-cache covering 1 product with 106 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Squid-cache vulnerabilities, Squid-cache security, Squid-cache CVE, Squid-cache threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":93,"@type":94,"name":95,"description":90,"url":96},"https:\u002F\u002Fschema.org","Organization","Squid-cache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsquid-cache",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":98,"apiVersion":99},"2026-10-17T23:51:38.199Z","3.0"]