{"uuid": "3e8a926c-c5a9-41bc-8662-257bb1715f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/pphm_HackerNews/1608", "content": "\ud83d\udd34 Squidbleed: 29-Year-Old Squid Bug Leaks User Credentials\n\nSquidbleed is a 29-year-old Squid Proxy flaw that can leak credentials, tokens, and other users\u2019 HTTP data through a memory overread.\n\nResearchers at Calif.io have disclosed CVE-2026-47729, a memory leak vulnerability in Squid Proxy that was introduced in 1997 and has remained undetected through nearly three decades of releases, audits, and rewrites. \n\nThey named it Squidbleed because it works like Heartbleed: it causes the proxy to read past the end of a memory buffer and hand the contents to whoever asked.\n\n\u201cThe bug occurs when no filename is provided after the modification timestamp.\u201d reads the report published by the researchers.", "creation_timestamp": "2026-08-21T23:00:11.531967Z"}