Product by Open Source

    Varnish HTTP Cache

    5 known vulnerabilities in Varnish HTTP Cache (Open Source), 1 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Varnish HTTP Cache (Open Source)
    CriticalCVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    In CISA KEValso in 160 other products

    		7.5
    CriticalCVE-2026-34475

    Varnish-Software Varnish Cache: Incorrect Behavior Order: Validate Before Canonicalize

    also in 4 other products

    		9.8
    MediumCVE-2025-30346

    Varnish-Software Varnish Cache: HTTP Request/Response Smuggling

    also in 4 other products

    		5.4
    MediumCVE-2025-47905

    Varnish-Software Varnish Cache: HTTP Request/Response Smuggling

    also in 2 other products

    		5.4
    LowCVE-2026-50052

    The Vinyl Cache Project Vinyl Cache: HTTP Request/Response Smuggling

    also in 2 other products

    		—

    All products by Open Source