squid

SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...

CVE-2017-7529-POC

CVE-2017-7529-POC Vulnerability Impact This vulnerability affects all Nginx default configuration modules from version 0.5.6 to 1.13.2. An attacker only needs to enable caching to send malicious requests for remote attacks, causing information disclosure. When the Nginx server uses a proxy cache,...

EUVD-2026-122960

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another...

EUVD-2026-122965

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another...

EUVD-2026-123056

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route...

CVE-2026-92545

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another...

CVE-2026-92558

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route...

CVE-2026-92442

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another...

CVE-2026-92558

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway are vulnerable to an improper encoding or escaping issue (CWE-116 ). The root cause is the failure to escape separator characters when constructing the cache key . This flaw allows a remote attacker to...

CVE-2026-92558

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route...

CVE-2026-92442

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another...

CVE-2026-92442

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise is vulnerable to a cache poisoning issue because it omits the caller's identity from the cache key. This flaw allows a response cached for one user to be incorrectly served to another. No specific exploit details or remediation ve...

CVE-2026-92545

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway are vulnerable to a cache poisoning issue. The root cause is that these plugins omit the request hostname from the cache key, which may lead to a response cached for one hostname being served to anothe...

CVE-2026-92545

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another...

PT-2026-144834

Name of the Vulnerable Software and Affected Versions Kong Gateway Enterprise affected versions not specified Kong AI Gateway affected versions not specified Description The proxy-cache and proxy-cache-advanced plugins fail to escape separator characters during the construction of the cache key...

PT-2026-144832

Name of the Vulnerable Software and Affected Versions Kong Gateway Enterprise affected versions not specified Description The graphql-proxy-cache-advanced plugin fails to include the caller's identity within the cache key. This flaw allows a cached response intended for one user to be incorrectly...

CVE-2026-92442: Kong Inc.: The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key,…

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another...

CVE-2026-92545: Kong Inc.: The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request…

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another...

CVE-2026-92558: Kong Inc.: The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator…

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route...

PT-2026-144767

Name of the Vulnerable Software and Affected Versions Kong Gateway Enterprise affected versions not specified Kong AI Gateway affected versions not specified Description The proxy-cache and proxy-cache-advanced plugins omit the request hostname from the cache key. This behavior can lead to a cach...