CVE-2022-41317

Squid CVE-2022-41317 affects versions 4.9–4.17 and 5.0.6–5.6; due to inconsistent handling of internal URIs, there is Exposure of Sensitive Information about clients via an HTTPS request to an internal cache manager URL. The issue is fixed in version 5.7. Remediation: update Squid to 5.7 or apply...

CVE-2021-41611

CVE-2021-41611 affects Squid 5.0.6 through 5.1.x before 5.2. During origin/peer certificate validation, Squid may misclassify certain certificates as trusted, potentially allowing a remote server to extend trust to clients and enable access to unsafe or hijacked services. The vulnerability’s CVSS...