{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-93894",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-93894",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-09-18T20:30:04.646Z",
    "updatedAt": "2026-09-19T14:01:28.211Z",
    "importedAt": "2026-10-24T01:58:41.756Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": null,
      "summary": "In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of service (DoS) vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability requires prior knowledge about the VCL in use and the ability to craft a request that contains a string that is long enough to fill the remaining workspace at the call site while staying under the different request size limits (http_req_size, http_req_hdr_len, etc.).",
      "affected": [
        {
          "vendor": "Vinyl-Cache",
          "product": "Vinyl Cache",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "9.0.2"
            },
            {
              "version": "0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "90f5bacc14b2404e6cc349ba015f0f73b8515136"
            }
          ]
        },
        {
          "vendor": "Varnish-Software",
          "product": "Varnish Cache",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "9.0.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "9.0.4"
            },
            {
              "version": "0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "c5078ae575201b05ae8674a90ddb19ffe7f4b439"
            },
            {
              "version": "6.3.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "8.0.2"
            }
          ]
        }
      ]
    }
  }
}