Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of service (DoS) vector to m
Low(2.3)
AffectedDetails (5)
7.7.0-3+deb13u1 · all · trixie
Affected · Fixed: 7.7.0-3+deb13u2
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie
Affected · Fixed: 7.7.0-3+deb13u2
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie-security
Affected · Fixed: 7.7.0-3+deb13u2
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie-security · Historical version
Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or auth
Medium(5.4)
AffectedDetails (5)
7.7.0-3+deb13u1 · all · trixie
Affected · Fixed: 7.7.0-3+deb13u2
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie
Affected · Fixed: 7.7.0-3+deb13u2
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie-security
Affected · Fixed: 7.7.0-3+deb13u2
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie-security · Historical version
In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync
attack (request smuggling), which in turn can be
Low(2.3)
FixedDetails (5)
7.7.0-3+deb13u1 · all · trixie
Fixed · Fixed: 7.7.0-3+deb13u1
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie
Fixed · Fixed: 7.7.0-3+deb13u1
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie-security
Fixed · Fixed: 7.7.0-3+deb13u1
nvd · varnish · debian · 13
7.7.0-3+deb13u1 · all · trixie-security · Historical version