{"id":"CVE-2025-62168","aliases":["ALPINE-CVE-2025-62168","ALSA-2025:19107","ALSA-2025:20935","ALSA-2025:21002","AZL-68562","AZL-68589","CLSA-2025-1763024537","CLSA-2025-1763031041","CLSA-2025-1763124681","CLSA-2025-1763370812","CLSA-2025-1763388821","CLSA-2025-1763397982","CLSA-2025-1763413374","CLSA-2025-1763467263","CLSA-2025-1763478867","CLSA-2025-1763490076","CLSA-2025-1763543346","CLSA-2025-1763717278","CLSA-2025-1764151964","CLSA-2025-1764152160","CLSA-2025-1764281284","CLSA-2025-1764681009","CLSA-2026-1790775234","CLSA-2026-1790851347","CLSA-2026-1790852342","DEBIAN-CVE-2025-62168","DLA-4369-1","DSA-6047-1","EUVD-2025-34894","GHSA-c8cc-phh7-xmxr","MGASA-2026-0094","OESA-2025-2531","OESA-2025-2606","OESA-2025-2607","OESA-2026-1164","OESA-2026-1165","OESA-2026-1551","RHSA-2025:19107","RHSA-2025:19114","RHSA-2025:19115","RHSA-2025:19118","RHSA-2025:19167","RHSA-2025:19277","RHSA-2025:19398","RHSA-2025:19967","RHSA-2025:20935","RHSA-2025:21002","RHSA-2025:21065","RHSA-2025:21066","RHSA-2025:21090","RLSA-2025:19107","RLSA-2025:20935","RLSA-2025:21002","SUSE-SU-2025:3902-1","SUSE-SU-2025:4026-1","SUSE-SU-2025:4029-1","SUSE-SU-2025:4099-1","SUSE-SU-2026:20078-1","SUSE-SU-2026:4909-1","UBUNTU-CVE-2025-62168","USN-7845-1","openSUSE-SU-2025:15715-1","openSUSE-SU-2026:20027-1"],"status":"published","title":"Squid vulnerable to information disclosure via authentication credential leakage in error handling","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.61588,"percentile":0.9918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-209","CWE-550"],"published":"2025-10-17T16:21:30Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"monzaviman/CVE-2025-62168","title":"monzaviman/CVE-2025-62168","date":"2025-10-22","url":"https://github.com/monzaviman/CVE-2025-62168"},{"source":"pocgithub","id":"shahroodcert/CVE-2025-62168","title":"shahroodcert/CVE-2025-62168","date":"2025-11-02","url":"https://github.com/shahroodcert/CVE-2025-62168"},{"source":"pocgithub","id":"nehkark/CVE-2025-62168","title":"nehkark/CVE-2025-62168","date":"2025-11-25","url":"https://github.com/nehkark/CVE-2025-62168"},{"source":"nuclei","id":"CVE-2025-62168","title":"Squid Proxy - HTTP Authentication Credentials Disclosure","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62168.yaml"}],"fixes":[{"ecosystem":"Alpine:v3.23","package":"squid","fixed_in":["7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"squid","fixed_in":["7.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libecap","fixed_in":["1.0.1-2.module_el8.6.0+2741+01592ae8","1.0.1-2.module_el8.6.0+3048+383bc947"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libecap-devel","fixed_in":["1.0.1-2.module_el8.6.0+2741+01592ae8","1.0.1-2.module_el8.6.0+3048+383bc947"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"squid","fixed_in":["7:4.15-10.module_el8.10.0+4055+645078d8.9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"squid","fixed_in":["7:5.5-22.el9_7.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"squid","fixed_in":["7:6.10-6.el10_1.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"squid","fixed_in":["6.13-3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"squid","fixed_in":["7:4.15-1.module_el8.5.0+2313+eb714ac0.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","fixed_in":["7:4.15-10.module_el8+2314+6d353102.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid","fixed_in":["4.10-1ubuntu1.13+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-cgi","fixed_in":["4.10-1ubuntu1.13+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-common","fixed_in":["4.10-1ubuntu1.13+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-purge","fixed_in":["4.10-1ubuntu1.13+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squidclient","fixed_in":["4.10-1ubuntu1.13+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"squid","fixed_in":["7:4.11-4.module_el8.4.0+2315+e9aef03b.2.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"squid","fixed_in":["4.6-1+deb10u10+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"squid-cgi","fixed_in":["4.6-1+deb10u10+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"squid-common","fixed_in":["4.6-1+deb10u10+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"squid-purge","fixed_in":["4.6-1+deb10u10+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"squid3","fixed_in":["4.6-1+deb10u10+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"squidclient","fixed_in":["4.6-1+deb10u10+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","fixed_in":["7:5.5-5.el9_2.1.tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"squid","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"squid-migration-script","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"squid-sysvinit","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"squid","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"squid-migration-script","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"squid-sysvinit","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"squid","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"squid-migration-script","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"squid-sysvinit","fixed_in":["7:3.5.20-17.0.5.el7_9.99.tuxcare.els2","7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"squid","fixed_in":["7:5.5-19.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.13-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["7.2-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"squid","fixed_in":["6.6-6.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"squid","fixed_in":["6.6-6.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"squid","fixed_in":["6.6-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.9.0+19703+a1da7223"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.9.0+19703+a1da7223"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.9.0+19703+a1da7223"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.9.0+19703+a1da7223"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","fixed_in":["7:4.15-10.module+el8.10.0+23592+d564ec65.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-10.module+el8.10.0+23592+d564ec65.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","fixed_in":["7:4.15-10.module+el8.10.0+23592+d564ec65.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"squid","fixed_in":["7:5.5-5.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-5.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"squid-debugsource","fixed_in":["7:5.5-5.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid","fixed_in":["7:5.5-13.el9_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-13.el9_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debugsource","fixed_in":["7:5.5-13.el9_4.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid","fixed_in":["7:5.2-1.el9_0.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debuginfo","fixed_in":["7:5.2-1.el9_0.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debugsource","fixed_in":["7:5.2-1.el9_0.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"squid","fixed_in":["7:3.5.20-17.el7_9.15"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debugsource","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debugsource","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debugsource","fixed_in":["7:4.15-3.module+el8.6.0+23600+226c63ed.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"squid","fixed_in":["7:4.15-6.module+el8.8.0+23607+473e38b5.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-6.module+el8.8.0+23607+473e38b5.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"squid-debugsource","fixed_in":["7:4.15-6.module+el8.8.0+23607+473e38b5.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"squid","fixed_in":["7:4.15-6.module+el8.8.0+23607+473e38b5.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-6.module+el8.8.0+23607+473e38b5.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"squid-debugsource","fixed_in":["7:4.15-6.module+el8.8.0+23607+473e38b5.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","fixed_in":["7:4.4-8.module+el8.2.0+23601+6cdb820c.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","fixed_in":["7:4.4-8.module+el8.2.0+23601+6cdb820c.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","fixed_in":["7:4.4-8.module+el8.2.0+23601+6cdb820c.11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","fixed_in":["7:5.5-22.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-22.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","fixed_in":["7:5.5-22.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"squid","fixed_in":["7:6.10-6.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"squid-debuginfo","fixed_in":["7:6.10-6.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"squid-debugsource","fixed_in":["7:6.10-6.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"squid","fixed_in":["7:6.10-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"squid-debuginfo","fixed_in":["7:6.10-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"squid-debugsource","fixed_in":["7:6.10-5.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"squid","fixed_in":["7:5.5-19.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-19.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"squid-debugsource","fixed_in":["7:5.5-19.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","fixed_in":["7:4.11-4.module+el8.4.0+23593+1fc48abe.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","fixed_in":["7:4.11-4.module+el8.4.0+23593+1fc48abe.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","fixed_in":["7:4.11-4.module+el8.4.0+23593+1fc48abe.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"squid","fixed_in":["7:4.11-4.module+el8.4.0+23593+1fc48abe.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"squid-debuginfo","fixed_in":["7:4.11-4.module+el8.4.0+23593+1fc48abe.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"squid-debugsource","fixed_in":["7:4.11-4.module+el8.4.0+23593+1fc48abe.10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"squid","fixed_in":["7:4.15-10.module+el8.10.0+2080+49064dbd.9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"squid","fixed_in":["7:5.5-22.el9_7.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"squid","fixed_in":["7:6.10-6.el10_1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server LTS 4.3","package":"squid","fixed_in":["5.7-150400.3.38.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"squid","fixed_in":["6.10-150600.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"squid","fixed_in":["6.10-150600.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"squid","fixed_in":["6.10-150600.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"squid","fixed_in":["4.17-150000.5.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"squid","fixed_in":["4.17-150000.5.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"squid","fixed_in":["4.17-150000.5.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"squid","fixed_in":["4.17-150000.5.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"squid","fixed_in":["4.17-4.59.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"squid","fixed_in":["4.17-4.59.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","fixed_in":["3.5.12-1ubuntu7.16+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","fixed_in":["4.10-1ubuntu1.13+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"squid","fixed_in":["5.9-0ubuntu0.22.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"squid","fixed_in":["6.13-0ubuntu0.24.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"squid","fixed_in":["6.13-1ubuntu4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"squid","fixed_in":["7.3-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8.10.0+4055+645078d8.9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-22.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-6.el10_1.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7-5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2313+eb714ac0.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8+2314+6d353102.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2315+e9aef03b.2.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1.tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-19.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.11.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u4"}]}],"versions":["5.7-2","5.7-2+deb12u1","5.7-2+deb12u2","5.7-2+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-2+deb13u1"}]}],"versions":["6.13-2"]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2-1"}]}],"versions":["6.13-2","7.1-1"]},{"source":"osv","ecosystem":"Debian:11","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10+deb11u6"}]}],"versions":["4.13-10","4.13-10+deb11u1","4.13-10+deb11u2","4.13-10+deb11u3","4.13-10+deb11u4","4.13-10+deb11u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u4"}]}],"versions":["5.7-2","5.7-2+deb12u1","5.7-2+deb12u2","5.7-2+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-2+deb13u1"}]}],"versions":["6.13-2"]},{"source":"osv","ecosystem":"Mageia:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1.5.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-6.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-6.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-29.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-29.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-25.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+23592+d564ec65.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+23592+d564ec65.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+23592+d564ec65.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.15"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+23600+226c63ed.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+23607+473e38b5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+23607+473e38b5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+23607+473e38b5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+23607+473e38b5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+23607+473e38b5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+23607+473e38b5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+23601+6cdb820c.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+23601+6cdb820c.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+23601+6cdb820c.11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-22.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-22.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-22.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-6.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-6.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-6.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-5.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-19.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-19.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-19.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+23593+1fc48abe.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+23593+1fc48abe.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+23593+1fc48abe.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+23593+1fc48abe.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+23593+1fc48abe.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+23593+1fc48abe.10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+2080+49064dbd.9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-22.el9_7.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.10-6.el10_1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.38.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-150600.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-150600.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-150600.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.59.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.59.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm5"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm4"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+esm1"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11","4.10-1ubuntu1.12","4.10-1ubuntu1.13"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-0ubuntu0.22.04.4"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3","5.7-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.1","5.9-0ubuntu0.22.04.2","5.9-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-0ubuntu0.24.04.3"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2","6.5-1ubuntu3","6.6-1ubuntu4","6.6-1ubuntu5","6.6-1ubuntu5.1","6.10-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-1ubuntu4.1"}]}],"versions":["6.13-1ubuntu1","6.13-1ubuntu2","6.13-1ubuntu3","6.13-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm5"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm4"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+esm1"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11","4.10-1ubuntu1.12","4.10-1ubuntu1.13"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-0ubuntu0.22.04.4"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3","5.7-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.1","5.9-0ubuntu0.22.04.2","5.9-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-0ubuntu0.24.04.3"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2","6.5-1ubuntu3","6.6-1ubuntu4","6.6-1ubuntu5","6.6-1ubuntu5.1","6.10-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-1ubuntu4.1"}]}],"versions":["6.13-1ubuntu1","6.13-1ubuntu2","6.13-1ubuntu3","6.13-1ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr","tags":["x_refsource_CONFIRM","Mitigation","Third Party Advisory","advisory","article","report"]},{"url":"https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2025/11/05/6","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-62168","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-62168","tags":["report"]},{"url":"https://bugzilla.redhat.com/2404736","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-19107.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:20935","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-20935.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21002","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-21002.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62168","tags":["web","advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1763024537.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1763031041.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1763124681.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1763370812.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1763388821.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1763397982.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1763413374.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1763467263.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1763478867.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1763490076.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1763543346.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763717278.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1764151964.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1764152160.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1764281284.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1764681009.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790775234.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790851347.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33620","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790852342.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62168.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-62168","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0094.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35271","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/03/25/2","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/03/25/3","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/03/25/4","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8157-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2531","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2606","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2607","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54574","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1165","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1551","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404736","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19107.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-62168","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19114","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19114.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19115","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19115.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19118","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19118.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19167","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19167.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19277","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19277.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19398","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19398.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19967","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19967.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-77084","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20935.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21002.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21065","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21065.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21066","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21066.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21090","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21090.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:19107","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:20935","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21002","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253902-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252281","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62168","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254026-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254029-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254099-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620078-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250627","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59362","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264909-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216496","tags":["report"]},{"url":"https://bugzilla.suse.com/1217825","tags":["report"]},{"url":"https://bugzilla.suse.com/1223329","tags":["report"]},{"url":"https://bugzilla.suse.com/1228150","tags":["report"]},{"url":"https://bugzilla.suse.com/1260452","tags":["report"]},{"url":"https://bugzilla.suse.com/1260453","tags":["report"]},{"url":"https://bugzilla.suse.com/1260454","tags":["report"]},{"url":"https://bugzilla.suse.com/1268272","tags":["report"]},{"url":"https://bugzilla.suse.com/1268320","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50012","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-62168","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7845-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-62168","title":"Squid vulnerable to information disclosure via authentication credential leakage in error handling","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T16:21:30.156Z","modified":"2026-02-26T16:57:24.141Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-209","CWE-550"],"updated_at":"2026-11-02T14:32:54.87586Z"}],"euvd":[{"id":"EUVD-2025-34894","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T16:21:30Z","modified":"2026-02-26T16:57:24Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T19:48:24.701817Z"}],"nvd":[{"id":"CVE-2025-62168","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T17:15:49.037Z","modified":"2026-10-19T16:10:00.26Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-209","CWE-550"],"updated_at":"2026-11-02T14:11:39.069866Z"}],"osv":[{"id":"ALPINE-CVE-2025-62168","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T17:15:49.037Z","modified":"2026-08-27T22:18:02.997122539Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"CVE-2025-62168","title":"Squid vulnerable to information disclosure via authentication credential leakage in error handling","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T16:21:30.156Z","modified":"2026-10-28T11:00:16.8534876Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-209","CWE-550"],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-62168","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T17:15:49.037Z","modified":"2026-10-23T17:47:37.108233356Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-2531","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nSquid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)","status":"published","published":"2025-10-24T11:09:37Z","modified":"2026-08-18T01:19:16.960887833Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2606","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nSquid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:17.675982573Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2607","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nSquid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:17.681704289Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2026-1164","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nSquid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)\n\nSquid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)","status":"published","published":"2026-01-16T11:10:12Z","modified":"2026-08-18T01:19:28.950054947Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1165","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nSquid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)\n\nSquid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)","status":"published","published":"2026-01-16T11:10:12Z","modified":"2026-08-18T01:19:28.318141296Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1551","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nSquid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)\n\nSquid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.654976253Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2025:19107","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2025-10-28T10:10:16Z","modified":"2026-07-12T10:04:29Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19114","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-10-28T10:10:18Z","modified":"2026-07-12T10:04:30Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19115","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-10-28T10:10:18Z","modified":"2026-07-12T10:04:30Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19118","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-10-28T10:10:19Z","modified":"2026-07-12T10:04:30Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19167","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-10-29T10:04:29Z","modified":"2026-07-12T10:04:31Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19277","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2025-10-30T10:05:13Z","modified":"2026-07-12T10:04:33Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19398","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2025-11-03T10:04:37Z","modified":"2026-07-12T10:04:34Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19967","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2025-11-10T10:03:45Z","modified":"2026-07-12T10:04:54Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:20935","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-11-12T10:28:08Z","modified":"2026-07-12T10:05:01Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21002","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-11-12T10:28:23Z","modified":"2026-07-12T10:05:07Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21065","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-11-12T10:28:47Z","modified":"2026-07-12T10:05:11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21066","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2025-11-12T10:28:48Z","modified":"2026-07-12T10:05:11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21090","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2025-11-12T10:28:56Z","modified":"2026-07-12T10:05:12Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RLSA-2025:19107","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-15T09:11:45.290734Z","modified":"2026-01-15T09:30:09.290954Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:20935","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:13:51.682496Z","modified":"2025-11-21T18:49:07.611537Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:21002","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:19:15.687303Z","modified":"2025-11-21T18:49:08.054911Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-62168","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-21T00:00:00Z","modified":"2026-02-04T05:34:35.672809Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"ALSA-2025:19107","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  \n\nSecurity Fix(es):  \n\n  * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-10-27T00:00:00Z","modified":"2026-10-29T11:02:22.678017379Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:20935","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  \n\nSecurity Fix(es):  \n\n  * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-11T00:00:00Z","modified":"2026-10-29T11:32:28.653584914Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:21002","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  \n\nSecurity Fix(es):  \n\n  * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-11T00:00:00Z","modified":"2026-10-29T11:58:11.947328Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-68562","title":"CVE-2025-62168 affecting package squid for versions less than 6.13-3","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T17:15:49Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.994498Z"},{"id":"AZL-68589","title":"CVE-2025-62168 affecting package squid 5.7-5","description":"Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.","status":"published","published":"2025-10-17T17:15:49Z","modified":"2026-04-21T04:38:27.172242Z","updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CLSA-2025-1763024537","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure","status":"published","published":"2025-11-13T15:52:22Z","modified":"2026-06-01T00:33:23.188992145Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763031041","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure","status":"published","published":"2025-11-14T14:25:41Z","modified":"2026-06-01T00:33:00.221505667Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763124681","title":"Fix CVE(s): CVE-2025-62168","description":"   * SECURITY UPDATE: information disclosure vulnerability in error handling\n     - debian/patches/CVE-2025-62168.patch: Fix HttpRequest::pack function to\n       handle sensitive data by including a parameter for masking sensitive\n       information\n     - CVE-2025-62168","status":"published","published":"2025-11-14T12:51:25Z","modified":"2026-06-04T10:03:54.439927Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763370812","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure","status":"published","published":"2025-11-17T09:13:36Z","modified":"2026-06-01T00:33:12.30414365Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763388821","title":"squid34: Fix of CVE-2025-62168","description":"- CVE-2025-62168: Redact HTTP authentication credentials in error handling to\n  prevent information disclosure","status":"published","published":"2025-11-17T14:13:44Z","modified":"2026-06-01T00:33:25.885180562Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763397982","title":"squid34: Fix of CVE-2025-62168","description":"- CVE-2025-62168: Redact HTTP authentication credentials in error handling to\n  prevent information disclosure","status":"published","published":"2025-11-17T16:46:27Z","modified":"2026-06-01T00:33:16.674813376Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763413374","title":"Fix CVE(s): CVE-2025-62168","description":"   * SECURITY UPDATE: information disclosure in error handling\n     - debian/patches/CVE-2025-62168.patch: Fix bug where proxy auth data was\n       visible to scripts by redacting credentials from error page code expansion\n       output and email links\n     - CVE-2025-62168","status":"published","published":"2025-11-18T11:54:30Z","modified":"2026-06-04T10:03:57.353949Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763467263","title":"Fix CVE(s): CVE-2025-62168","description":"   * SECURITY UPDATE: information disclosure via HTTP authentication credentials\n     - debian/patches/CVE-2025-62168.patch: Fix bug causing visibility of proxy\n       auth data to scripts by redacting credentials from error page code\n       expansion output and mailto link generation\n     - CVE-2025-62168","status":"published","published":"2025-11-18T12:01:08Z","modified":"2026-06-04T10:03:56.500966Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763478867","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure","status":"published","published":"2025-11-18T15:14:30Z","modified":"2026-06-01T00:33:25.947556456Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763490076","title":"Fix CVE(s): CVE-2025-62168","description":"   * SECURITY UPDATE: failure to redact HTTP authentication credentials in error\n     handling allows information disclosure\n     - debian/patches/CVE-2025-62168.patch: Fix HttpRequest::pack to mask\n       sensitive information to prevent disclosure\n     - CVE-2025-62168","status":"published","published":"2025-11-18T18:21:20Z","modified":"2026-06-04T10:03:52.853869Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763543346","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure","status":"published","published":"2025-11-19T09:09:17Z","modified":"2026-06-01T00:33:16.711624412Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763717278","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix redaction failure to prevent information disclosure in\n  error handling","status":"published","published":"2025-11-21T09:28:02Z","modified":"2026-06-01T00:31:20.356243832Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1764151964","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure\n- email_err_data directive now defaults to 'off' for security (previously 'on')","status":"published","published":"2025-11-26T10:12:47Z","modified":"2026-06-01T00:33:14.226578416Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1764152160","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure\n- email_err_data directive now defaults to 'off' for security (previously 'on')","status":"published","published":"2025-11-26T10:16:05Z","modified":"2026-06-01T00:33:27.898434345Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1764281284","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error\n  handling to prevent information disclosure\n- email_err_data directive now defaults to 'off' for security (previously 'on')","status":"published","published":"2026-07-07T15:39:03Z","modified":"2026-07-07T15:39:03Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1764681009","title":"squid: Fix of CVE-2025-62168","description":"- CVE-2025-62168: fix redaction failure to prevent information disclosure in\n  error handling","status":"published","published":"2025-12-02T22:05:54Z","modified":"2026-06-01T00:32:35.982188275Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1790775234","title":"squid: Fix of CVE-2025-62168","description":"- Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13\n- CVE-2025-62168: complete fix: also redact credentials in the %W mailto\n  body, from Oracle 17.0.9\n- Deny URN requests in the default squid.conf (upstream workaround),\n  from Oracle 17.0.7","status":"published","published":"2026-09-30T13:34:02Z","modified":"2026-10-26T09:31:56.41032359Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790851347","title":"squid: Fix of 5 CVEs","description":"- Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13\n- CVE-2025-62168: complete fix: also redact credentials in the %W mailto\n  body, from Oracle 17.0.9\n- Deny URN requests in the default squid.conf (upstream workaround),\n  from Oracle 17.0.7","status":"published","published":"2026-10-22T04:49:45Z","modified":"2026-10-26T09:31:48.751277716Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790852342","title":"squid: Fix of 4 CVEs","description":"- Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13\n- CVE-2025-62168: complete fix: also redact credentials in the %W mailto\n  body, from Oracle 17.0.9\n- Deny URN requests in the default squid.conf (upstream workaround),\n  from Oracle 17.0.7","status":"published","published":"2026-10-22T04:53:08Z","modified":"2026-10-26T09:31:59.121337045Z","updated_at":"2026-11-02T15:43:48.65893Z"}]},"sources_more":{"osv":12}}