Varnish-software vulnerabilities

Products

• Varnish Cache 7
• Varnish Cache 7
• Varnish Enterprise 6
• Varnish Enterprise 3
• Varnish Cache Plus 2

Newest

• the vinyl cache project vinyl cache, varnish-software varnish cache +1 more In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper()... CVE-2026-93894 Fix available 2.3 LowSeptember 18, 2026
• varnish-software varnish cache, vinyl-cache vinyl cache +1 more Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after... CVE-2026-40396 4.0 MediumApril 12, 2026
• varnish-software varnish enterprise Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic... CVE-2026-40395 4.0 MediumApril 12, 2026
• varnish-software varnish cache, varnish enterprise, vinyl-cache vinyl cache +2 more Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow... CVE-2026-40394 4.0 MediumApril 12, 2026
• varnish-software varnish cache, varnish enterprise, vinyl-cache vinyl cache +2 more Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url... CVE-2026-34475 Fix available 5.4 MediumMarch 27, 2026
• fastly h20, github enterprise server, linux +16 more +18 more CVE-2025-8671 CVE-2025-8671 Public exploitFix available 7.5 HighAugust 13, 2025
• varnish-software varnish cache Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow... CVE-2025-47905 Fix available 5.4 MediumMay 13, 2025
• varnish-software varnish enterprise Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via... CVE-2025-30347 4.0 MediumMarch 21, 2025
• varnish-software varnish cache, varnish enterprise, varnish cache project cache +2 more Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via... CVE-2025-30346 Fix available 5.4 MediumMarch 21, 2025
• libvmod digest digest, varnish-software varnish enterprise, vmod digest +2 more libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of... CVE-2023-41104 6.5 MediumAugust 23, 2023
• varnish-software varnish cache, varnish cache project cache, debian linux +2 more +4 more An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x... CVE-2022-45060 Fix available 7.5 HighNovember 9, 2022
• varnish-software varnish cache, varnish cache project cache, debian linux +3 more +5 more In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and... CVE-2022-23959 Fix available 9.1 CriticalJanuary 26, 2022
• varnish-cache varnish cache, varnish cache project cache, debian linux +1 more +3 more Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a... CVE-2021-36740 Fix available 6.5 MediumJuly 14, 2021
• varnish-cache varnish cache, opensuse backports sle, leap +2 more An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3... CVE-2019-20637 Fix available 7.5 HighApril 8, 2020
• varnish-cache varnish cache, debian linux, opensuse backports sle +1 more +3 more An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3... CVE-2020-11653 Fix available 7.5 HighApril 8, 2020
• varnish-software varnish cache, varnish cache project cache, debian linux +2 more An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An... CVE-2019-15892 Fix available 7.5 HighSeptember 3, 2019
• varnish-cache varnish, varnish cache project cache, varnish-software varnish cache +2 more An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0,... CVE-2017-12425 Fix available 7.5 HighAugust 2, 2017