| Package | Affected versions | Patched versions |
|---|---|---|
| varnish enterprise | = 6.0.16≤ 6.0.15 | |
| vinyl cache | < 8.0.1 | 8.0.1 |
Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free