VC
Product
Varnish Cache (pre split)
by The Vinyl Cache Project · last CVE Jun 3, 2026
1
CVEs
0
On KEV
2.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 1
Watch

Add Varnish Cache (pre split) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50052
2.3
0%
Jun 3
In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request smuggling),…
Affected: 7.6.0 through 8.0.1; 6.0.14 through 6.0.17
Showing 1