varnish_cache vulnerabilities

CVEs whose affected-version data names the varnish_cache package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93894Low· 2.3

6d ago

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of service (DoS) vector to make the child process segfault or ass…

▾ SunlitVinyl-Cache · Vinyl CacheEPSS 0.25%via NVD