Login Request a demo
VC
Product
Varnish Cache
by Varnish Cache Project · last CVE Mar 21, 2025
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 7Medium 2Low 0
Severity
All severities13Critical2High7Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Varnish Cache to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-36740
6.5
2%
Jul 14
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request
Affected: 5.0.0 through 5.2.1; 6.1.0 through 6.6.0
CVE-2025-30346
4.8
0%
Mar 21
Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests
Affected: before 7.6.2
Showing 2