[{"CVE":"CVE-2020-11653","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":[],"bugzilla":"1813867","bugzilla_description":"CVE-2020-11653 varnish: remote clients may cause Varnish to assert and restart which could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11653.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20637","severity":"low","public_date":"2019-10-21T00:00:00Z","advisories":[],"bugzilla":"1772362","bugzilla_description":"CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-15892","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1756079","bugzilla_description":"CVE-2019-15892 varnish: denial of service handling certain crafted HTTP/1 requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8807","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1513523","bugzilla_description":"CVE-2017-8807 varnish: Data leak - ‘-sfile’ Stevedore transient objects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-12425","severity":"moderate","public_date":"2017-08-02T00:00:00Z","advisories":[],"bugzilla":"1477222","bugzilla_description":"CVE-2017-12425 varnish: Missing check for integer overflow when handling chunk sizes in HTTP requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12425.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8852","severity":"important","public_date":"2015-03-12T00:00:00Z","advisories":[],"bugzilla":"1328361","bugzilla_description":"CVE-2015-8852 varnish: http smuggling issues","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8852.json"}]