| Published | Advisory | Affected components | Identifiers |
|---|---|---|---|
| September 16, 2026 | Vinyl Cache / Varnish Cache VCL string methods workspace overflow Security | Varnish Cache, Vinyl Cache | VSV00020 |
| May 20, 2026 | Varnish Cache HTTP/2 parsing deficiency Security | Varnish Cache, Vinyl Cache | VSV00019 CVE-2026-50052 |
| April 14, 2026 | Workspace overflow in HTTP/1 lingering sessions Security | Varnish Cache | CVE-2026-40396 |
| April 9, 2026 | Denial Of Service in shared VCL deployments Security | Varnish Enterprise | VEV00003 CVE-2026-40395 |
| April 9, 2026 | Workspace overflow in HTTP/2 sessions Security | Varnish Cache, Varnish Enterprise | VEV00002 CVE-2026-40394 |
| April 1, 2026 | HTTP/1 absolute URL parsing deficiency Security | Varnish Cache, Varnish Enterprise | VSV00018 CVE-2026-34475 |
| August 13, 2025 | HTTP/2 Made You Reset Attack Security | Varnish Cache, Varnish Enterprise | VSV00017 CVE-2025-8671 |
| May 13, 2025 | HTTP/1 Request Smuggling Attack Security | Varnish Cache, Varnish Enterprise | VSV00016 CVE-2025-47905 |
| March 18, 2025 | Varnish Enterprise vulnerability in MSE4 when handling range requests Security | Varnish Enterprise | VEV00001 CVE-2025-30347 |
| March 18, 2025 | HTTP/1 client-side desync vulnerability Security | Varnish Cache, Varnish Enterprise | VSV00015 CVE-2025-30346 |
| August 17, 2023 | Base64 decoding vulnerability in vmod-digest Security | Varnish Cache, Varnish Enterprise, Varnish Modules | VSV00012 CVE-2023-41104 |
| November 8, 2022 | Varnish HTTP/2 Request Forgery Security | Varnish Cache, Varnish Enterprise | VSV00011 |
| November 8, 2022 | Open Source Varnish Request Smuggling Security | Varnish Cache | VSV00010 |
| August 9, 2022 | Open Source Varnish Cache Denial of Service Security | Varnish Cache | VSV00009 CVE-2022-38150 |
| January 25, 2022 | Varnish HTTP/1 Request Smuggling Security | Varnish Cache, Varnish Enterprise | VSV00008 CVE-2022-23959 |
| December 13, 2021 | Varnish Administration Console Log4j2 CVE-2021-44228 and CVE-2021-45046 Security | Varnish Administration Console | CVE-2021-44228 CVE-2021-45046 |
| July 13, 2021 | Varnish HTTP/2 Request Smuggling Security | Varnish Cache, Varnish Enterprise | VSV00007 CVE-2021-36740 |
| March 16, 2021 | Varnish Cache 6.5 / Varnish Modules 0.17.0 Denial of Service Security | Varnish Modules | VSV00006 |
| February 4, 2020 | Varnish HTTP Proxy Protocol V2 Denial of Service Security | Varnish Cache, Varnish Enterprise | VSV00005 |
| October 21, 2019 | Varnish HTTP Workspace information leak vulnerability Security | Varnish Cache, Varnish Enterprise | VSV00004 |
| September 3, 2019 | Varnish HTTP Cache DoS vulnerability Security | Varnish Cache, Varnish Enterprise | VSV00003 CVE-2019-15892 |
| November 15, 2017 | Varnish Cache data leak when using file stevedore with synthetic objects Security | Varnish Cache | VSV00002 CVE-2017-8807 |
| August 2, 2017 | Varnish HTTP Cache DoS vulnerability Security | Varnish Cache, Varnish Enterprise | VSV00001 CVE-2017-12425 |
