<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T17:59:21.775204+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-varnish-2022-45059</id>
    <title>BIT-varnish-2022-45059</title>
    <updated>2026-10-04T17:59:21.945089+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: varnish</p>
<p>An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-varnish-2022-45059"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-236270</id>
    <title>EUVD-2026-236270</title>
    <updated>2026-10-04T17:59:21.945145+00:00</updated>
    <content>EUVD-2026-236270</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-236270"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-45059</id>
    <title>fkie_cve-2022-45059</title>
    <updated>2026-10-04T17:59:21.945162+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-45059"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-p22x-6r5h-g873</id>
    <title>GHSA-p22x-6r5h-g873</title>
    <updated>2026-10-04T17:59:21.945186+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-p22x-6r5h-g873"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-45059</id>
    <title>gsd-2022-45059</title>
    <updated>2026-10-04T17:59:21.945201+00:00</updated>
    <content>gsd-2022-45059</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-45059"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2023-1915</id>
    <title>OESA-2023-1915 — varnish security update</title>
    <updated>2026-10-04T17:59:21.945212+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: varnish</p>
<p>This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.

Security Fix(es):

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.(CVE-2022-45059)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2023-1915"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2022:10198-1</id>
    <title>openSUSE-SU-2022:10198-1 — Security update for varnish</title>
    <updated>2026-10-04T17:59:21.945235+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for varnish</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2022:10198-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45059</id>
    <title>Withdrawn: UBUNTU-CVE-2022-45059</title>
    <updated>2026-10-04T17:59:21.945253+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Withdrawn by the publisher.</strong></p>
<p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: varnish, Ubuntu:Pro:16.04:LTS: varnish, Ubuntu:Pro:18.04:LTS: varnish, Ubuntu:20.04:LTS: varnish, Ubuntu:22.04:LTS: varnish, Ubuntu:24.10: varnish, Ubuntu:24.04:LTS: varnish</p>
<p>An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45059"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2036</id>
    <title>WID-SEC-W-2022-2036 — Varnish HTTP Cache: Mehrere Schwachstellen ermöglichen Manipulation von Dateien</title>
    <updated>2026-10-04T17:59:21.945280+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Varnish HTTP Cache ausnutzen, um Dateien zu manipulieren.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2036"/>
  </entry>
</feed>
