An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-12528.json"