Skip to content
OpenAdvisories

Package · crates.io

pingora-core

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-2835 Public exploit

    HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

    An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Tran…

    Cloudflare https://github.com/cloudflare/pingora pingora-core crates.io