Threats tagged 'ghsa-pfj3-384h-g8q8'

CVE-2026-93894 is a workspace buffer overflow vulnerability in Vinyl Cache versions before 9.0.2, specifically in the .upper() and .lower() string methods of VCL. This flaw can be exploited remotely to cause a denial of service by crashing the child process, which then restarts. Exploitation requires detailed knowledge of the VCL in use and crafting a request with a string long enough to overflow the workspace while respecting request size limits.