CVE-2019-18860by Jeremyin Security Bulletinson Posted on March 23, 2020 Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.