Skip to content
OpenAdvisories

Package · Packagist

ibexa/http-cache

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    ibexa/http-cache affected by Breach with Varnish VCL

    ### Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted thr…