VC
Product
Vinyl Cache
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 1
Watch
Add Vinyl Cache to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34475 | 9.8 | Mar 27 | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to… Affected: before 8.0.1 |
| CVE-2026-40396 | 7.5 | Apr 12 | Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger Affected: 9.0.0 |
| CVE-2026-40394 | 7.5 | Apr 12 | Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data Affected: 9.0.0 |
| CVE-2026-93894 | 2.3 | Sep 18 | In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL Affected: before 9.0.2; before 90f5bacc14b2404e6cc349ba015f0f73b8515136 |
Showing 4