Open Source Squid

Name: Open Source Squid
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

1critical17high10medium0low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-31806US	medium6.5	95.3% (100th)	Exploit	4.15	2021-05-27	3 versions
CVE-2025-62168US	high7.5	63.4% (99th)	Exploit	7.2	2025-10-17	< 7.2
CVE-2025-54574US	critical9.8	24.0% (98th)	Exploit	6.4	2025-08-01	< 6.4
CVE-2026-47729US	—	1.50% (74th)	Exploit	7.6	2026-07-16	< 7.6
CVE-2023-49285US	high7.5	88.1% (100th)	—	6.0.1	2023-12-04	2 versions
CVE-2024-25617US	high7.5	88.1% (100th)	—	6.5	2024-02-14	< 6.5
CVE-2021-33620US	medium6.5	79.6% (100th)	—	4.15	2021-05-28	2 versions
CVE-2023-46847US	high7.5	78.5% (100th)	—	6.4	2023-11-03	< 6.4
CVE-2021-28662US	medium6.5	71.8% (99th)	—	4.15	2021-05-27	3 versions
CVE-2024-25111US	high7.5	65.3% (99th)	—	6.8	2024-03-06	< 6.8
CVE-2024-23638US	medium6.5	60.1% (99th)	—	6.6	2024-01-24	< 6.6
CVE-2023-50269US	high7.5	57.6% (99th)	—	6.6	2023-12-14	< 6.6
CVE-2024-45802US	high7.5	47.9% (99th)	—	7.0	2024-10-28	< 7.0
CVE-2023-46848US	high7.5	10.5% (96th)	—	6.4	2023-11-03	< 6.4
CVE-2023-49286US	high7.5	10.4% (96th)	—	6.5	2023-12-04	2 versions
CVE-2026-33526US	high7.5	9.08% (95th)	—	7.5	2026-03-26	< 7.5
CVE-2026-32748US	high7.5	9.06% (95th)	—	7.5	2026-03-26	< 7.5
CVE-2021-28651US	high7.5	7.45% (94th)	—	4.15	2021-05-27	3 versions
CVE-2023-46846US	medium5.3	6.60% (94th)	—	6.4	2023-11-03	< 6.4
CVE-2023-46728US	high7.5	5.96% (93rd)	—	6.0.1	2023-11-06	< 6.0.1
CVE-2021-31808US	medium6.5	5.34% (93rd)	—	4.15	2021-05-27	3 versions
CVE-2023-49288US	high7.5	4.78% (92nd)	—	6.0.1	2023-12-04	< 6.0.1
CVE-2021-28652US	medium4.9	4.34% (91st)	—	4.15	2021-05-27	3 versions
CVE-2023-46724US	high7.5	4.05% (91st)	—	6.4	2023-11-01	< 6.4
CVE-2022-41318US	high8.6	3.08% (88th)	—	5.7	2022-12-25	< 5.7
CVE-2023-5824US	high7.5	3.03% (87th)	—	6.4	2023-11-03	< 6.4
CVE-2026-61642US	—	2.22% (83rd)	—	7.7	2026-10-13	< 7.7
CVE-2022-41317US	medium6.5	1.85% (79th)	—	5.7	2022-12-25	< 5.7
CVE-2026-50012US	medium5.5	1.36% (72nd)	—	7.6	2026-07-16	< 7.6
CVE-2026-33515US	medium6.5	1.06% (64th)	—	7.5	2026-03-26	< 7.5
CVE-2024-28177US	—	—	—	7.7	—	< 7.7
CVE-2024-28178US	—	—	—	7.7	—	< 7.7
CVE-2026-62846US	—	—	—	7.7	—	< 7.7

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-416Use After Free3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-126Buffer Over-read2 CVEs
CWE-1289Improper Validation of Unsafe Equivalence in Input2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan