varnish

6 results · Clear filters · Feed

• Medium 4.0
  CVE-2026-40396

  Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger. A mal…

  varnish-software Varnish Cache varnish Ubuntu
  Apr 12, 2026
• Medium 4.0
  CVE-2026-40395

  Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The …

  varnish-software Varnish Enterprise varnish Ubuntu
  Apr 12, 2026
• Medium 4.0
  CVE-2026-40394

  Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (d…

  varnish-software Varnish Cache varnish Ubuntu
  Apr 12, 2026
• Medium 5.4
  CVE-2026-34475

  Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle U…

  varnish-software Varnish Cache varnish varnish Debian Ubuntu
  Mar 27, 2026
• Medium 5.4
  CVE-2025-47905

  Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via …

  varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine
  May 13, 2025
• Medium 5.4
  CVE-2025-30346

  Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

  varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine
  Mar 21, 2025