CVE-2021-46784

The CVE-2021-46784 issue affects Squid 3.x–3.5.28, 4.x–4.17, and 5.x prior to 5.6, caused by improper buffer management that can lead to a Denial of Service when processing long Gopher server responses. Affected releases are vulnerable to DoS; remediation is to update to a fixed version (5.6 or l...

CVE-2022-41317

Squid CVE-2022-41317 affects versions 4.9–4.17 and 5.0.6–5.6; due to inconsistent handling of internal URIs, there is Exposure of Sensitive Information about clients via an HTTPS request to an internal cache manager URL. The issue is fixed in version 5.7. Remediation: update Squid to 5.7 or apply...