Most recent entries from all

bdu:2025-16096

BIT-varnish-2025-30346

Affected: Bitnami: varnish

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

EUVD-2026-226777

fkie_cve-2025-30346

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

GHSA-hxcm-q7m2-7qhp

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

OESA-2025-1333 — varnish security update

Affected: openEuler:24.03-LTS-SP1: varnish, openEuler:20.03-LTS-SP4: varnish, openEuler:22.03-LTS-SP3: varnish, openEuler:22.03-LTS-SP4: varnish, openEuler:24.03-LTS: varnish

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture. Security Fix(es):

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.(CVE-2025-30346)

openSUSE-SU-2025:14992-1 — libvarnishapi3-7.7.0-1.1 on GA media

libvarnishapi3-7.7.0-1.1 on GA media

UBUNTU-CVE-2025-30346

Affected: Ubuntu:14.04:LTS: varnish, Ubuntu:Pro:16.04:LTS: varnish, Ubuntu:Pro:18.04:LTS: varnish, Ubuntu:Pro:20.04:LTS: varnish, Ubuntu:Pro:22.04:LTS: varnish, Ubuntu:24.04:LTS: varnish

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

WID-SEC-W-2025-0585 — Varnish HTTP Cache: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein Angreifer kann eine Schwachstelle in Varnish HTTP Cache ausnutzen, um Daten zu manipulieren, vertrauliche Informationen preiszugeben oder Sicherheitsmaßnahmen zu umgehen.