Vulnerabilities > Varnish Cache Project > Varnish Cache > 2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2025-03-21	CVE-2025-30346	HTTP Request Smuggling vulnerability in multiple products Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests. network high complexity varnish-software varnish-cache-project CWE-444	4.8
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2020-02-12	CVE-2013-4090	Unspecified vulnerability in Varnish Cache Project Varnish Cache Varnish HTTP cache before 3.0.4: ACL bug network low complexity varnish-cache-project	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.