Vulnerabilities

TI-2021-14866 CVE-2021-36740 · GHSA-8vxj-gx32-j925

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass…

LOW 32

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01599 Published 2021-07-14 Fixed CWE-444

TI-2019-14857 CVE-2019-20637 · GHSA-h2vv-cmjp-m2w5

LOW 36

An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0179 Published 2020-04-08 Partial fix CWE-212

TI-2020-09351 CVE-2020-11653 · GHSA-jg36-89rw-qgr3

LOW 37

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02159 Published 2020-04-08 Partial fix CWE-617