Threats affecting pkg:github/varnish/varnish

Varnish Cache version 9.0.0 contains a vulnerability that allows a denial of service via a workspace overflow leading to a daemon panic. This occurs when a malicious client sends an HTTP/1 request, waits for the session to release its worker thread (timeout_linger), and then resumes traffic before the session closes (timeout_idle), sending multiple requests simultaneously to trigger pipelining. The issue stems from incomplete handling of workspace rollback during pipelining, causing prefetched data to exceed workspace limits and crash the server.