Skip to content
OpenAdvisories

Vendor

Cloudflare

66 known vulnerabilities.

Products

WARP 14 quiche 9 octorpki 9 https://github.com/cloudflare/pingora 6 Wrangler 4 WARP Client 4 cloudflared 2 CIRCL 2 lua-resty-json 1 Cloudflare-WordPress 1 gokey 1 tokio-boring 1 lol-html 1 Universal SSL 1 odoh-rs 1 tokio-quiche 1 zlib 1 Cloudflare WARP for Windows 1 workerd 1 goflow 1 miniflare 1 https://github.com/cloudflare/pages-action 1 workers-sdk 1 cfnts 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-2835 Public exploit

    HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

    An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Tran…

    Cloudflare https://github.com/cloudflare/pingora pingora-core crates.io