| Package | Affected versions | Patched versions |
|---|---|---|
| varnich cache | = 4.1≥ 1.0.0, < 6.6.2≥ 4.1.1, < 4.1.11r6 | 6.6.24.1.11r6 |
| varnish cache | ≥ 6.0.0, < 6.0.10 | 6.0.10 |
| varnish cache plus | ≥ 6.0.0, < 6.0.9r4 | 6.0.9r4 |
| varnish cache | ≥ 7.0.0, < 7.0.2 | 7.0.2 |
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free