Security archive

August 17, 2023: Base64 decoding vulnerability in vmod-digest Security
November 8, 2022: Varnish HTTP/2 Request Forgery Security
November 8, 2022: Open Source Varnish Request Smuggling Security
August 9, 2022: Open Source Varnish Cache Denial of Service Security
January 25, 2022: Varnish HTTP/1 Request Smuggling Security
December 13, 2021: Varnish Administration Console Log4j2 CVE-2021-44228 and CVE-2021-45046 Security
July 13, 2021: Varnish HTTP/2 Request Smuggling Security
March 16, 2021: Varnish Cache 6.5 / Varnish Modules 0.17.0 Denial of Service Security
February 4, 2020: Varnish HTTP Proxy Protocol V2 Denial of Service Security
October 21, 2019: Varnish HTTP Workspace information leak vulnerability Security
September 3, 2019: Varnish HTTP Cache DoS vulnerability Security
November 15, 2017: Varnish Cache data leak when using file stevedore with synthetic objects Security
August 2, 2017: Varnish HTTP Cache DoS vulnerability Security

Manuals
Varnish Enterprise
Varnish Cloud
Varnish Controller
Varnish High Availability
Varnish Custom Statistics
Varnish WAF
Varnish Broadcaster
Varnish Helm Chart
Packages
Docker

News
Varnish Controller 6.6.3
Varnish Enterprise 6.0.13r10
Varnish Controller 6.6.2
Varnish Controller 6.6.1
Varnish Enterprise 6.0.13r9
News archive

®Varnish Software, Wallingatan 12, 111 60 Stockholm, Organization nr. 556805-6203