VC
Product
Varnish Cache
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 3Low 1
Watch
Add Varnish Cache to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34475 | 9.8 | Mar 27 | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to… Affected: before 6.0.17 LTS; 7.0.0 before 8.0.1 |
| CVE-2022-23959 | 9.1 | Jan 26 | In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4,… Affected: 6.0.0 before 6.0.10 |
| CVE-2026-40396 | 7.5 | Apr 12 | Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger Affected: 9.0.0 before 9.0.1 |
| CVE-2026-40394 | 7.5 | Apr 12 | Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data Affected: 9.0.0 before 9.0.1 |
| CVE-2025-8671 | 7.5 | Aug 13 | No description published yet Affected: 6.0LTS through 6.014; 5.x through 7.71 |
| CVE-2022-45060 | 7.5 | Nov 9 | An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1 Affected: 6.0.0 before 6.0.11 |
| CVE-2020-11653 | 7.5 | Apr 8 | An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2 Affected: 6.0.0 before 6.0.6 |
| CVE-2019-20637 | 7.5 | Apr 8 | An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1 Affected: 6.0.0 before 6.0.5 |
| CVE-2019-15892 | 7.5 | Sep 3 | An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1 Affected: 6.0.0 before 6.0.4 |
| CVE-2017-12425 | 7.5 | Aug 4 | An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2 Affected: 4.1.0; 4.1.0; 4.1.1; 4.1.1; 4.1.1; 4.1.2; +14 more |
| CVE-2021-36740 | 6.5 | Jul 14 | Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request Affected: 6.0.0 through 6.0.5; 6.0.0 through 6.0.7 |
| CVE-2025-47905 | 5.4 | May 13 | Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits… Affected: before 6.0.14 LTS; 7.0.0 before 7.6.3; 7.7.0 before 7.7.1 |
| CVE-2025-30346 | 4.8 | Mar 21 | Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests Affected: 7.5.0 before 7.6.2 |
| CVE-2026-93894 | 2.3 | Sep 18 | In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL Affected: 9.0.0 before 9.0.4; before c5078ae575201b05ae8674a90ddb19ffe7f4b439; 6.3.0 through 8.0.2 |
Showing 14