DHI-2yy2-ox2p-bl4g-we3r
- Source
- https://scout.docker.com/v/DHI-2yy2-ox2p-bl4g-we3r
- Import Source
- https://github.com/docker-hardened-images/advisories-test/blob/main/osv/DHI-2yy2-ox2p-bl4g-we3r.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DHI-2yy2-ox2p-bl4g-we3r
- Upstream
- Published
- 2026-07-24T20:25:39Z
- Modified
- 2026-08-07T05:44:06Z
- Summary
- An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x…
- Details
-
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.
- References