Security archive

January 25, 2022: Varnish HTTP/1 Request Smuggling Security
December 13, 2021: Varnish Administration Console Log4j2 CVE-2021-44228 and CVE-2021-45046 Security
July 13, 2021: Varnish HTTP/2 Request Smuggling Security
March 16, 2021: Varnish Cache 6.5 / Varnish Modules 0.17.0 Denial of Service Security
February 4, 2020: Varnish HTTP Proxy Protocol V2 Denial of Service Security
October 21, 2019: Varnish HTTP Workspace information leak vulnerability Security
September 3, 2019: Varnish HTTP Cache DoS vulnerability Security
November 15, 2017: Varnish Cache data leak when using file stevedore with synthetic objects Security
August 2, 2017: Varnish HTTP Cache DoS vulnerability Security

Manuals
Varnish Live
Varnish Cloud
Varnish Cache Plus
Varnish High Availability
Varnish Controller
Varnish Custom Statistics
Varnish Broadcaster
Varnish WAF
Varnish Administration Console

News
Varnish Custom Statistics 6.2.2
Varnish Controller 4.1.2
Varnish Cache Plus 6.0.9r7
Varnish Controller 4.1.1
Varnish Cache Plus 6.0.9r6
News archive