Medium DSA-5918-1 2 CVEs

varnish - security update

Published May 13, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 12	varnish	7.1.1-2+deb12u1

Vulnerabilities 2

Medium 5.4

CVE-2025-30346

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine

Mar 21, 2025
Medium 5.4

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via …

varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine

May 13, 2025