HIGHcrates.io
GHSA-393w-9x6h-8gc7Pingora update for MadeYouReset HTTP/2 vulnerability
Modified: 9/17/2025
package
crates.io/pingora-core
pkg:crates.io/pingora-core
HIGHcrates.io
GHSA-93c7-7xqw-w357· CVE-2025-4366, RUSTSEC-2025-0037Pingora has a Request Smuggling Vulnerability
Modified: 6/20/2025
CRITICALcrates.io
GHSA-hj7x-879w-vrp7· CVE-2026-2835, RUSTSEC-2026-0034Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
Modified: 3/9/2026
CRITICALcrates.io
GHSA-xq2h-p299-vjwv· CVE-2026-2833, RUSTSEC-2026-0033Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade
Modified: 3/9/2026
—crates.io
RUSTSEC-2025-0037· CVE-2025-4366, GHSA-93c7-7xqw-w357Pingora Request Smuggling and Cache Poisoning
Modified: 10/28/2025
—crates.io
RUSTSEC-2025-0070· CVE-2025-8671, GHSA-mrjm-qq9m-9mjqPingora MadeYouReset HTTP/2 vulnerability
Modified: 9/18/2025
—crates.io
RUSTSEC-2026-0033· CVE-2026-2833, GHSA-xq2h-p299-vjwvHTTP Request Smuggling via Premature Upgrade
Modified: 3/9/2026
—crates.io
RUSTSEC-2026-0034· CVE-2026-2835, GHSA-hj7x-879w-vrp7HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
Modified: 3/9/2026