Categories ⋅ Keywords ⋅ Packages Advisories for package 'pingora-core' October 26, 2026 MEDIUM RUSTSEC-2026-0388: Vulnerability in pingora-core Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass October 26, 2026 HIGH RUSTSEC-2026-0389: Vulnerability in pingora-core Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits March 5, 2026 CRITICAL RUSTSEC-2026-0034: Vulnerability in pingora-core HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing March 5, 2026 CRITICAL RUSTSEC-2026-0033: Vulnerability in pingora-core HTTP Request Smuggling via Premature Upgrade September 18, 2025 RUSTSEC-2025-0070: Vulnerability in pingora-core Pingora MadeYouReset HTTP/2 vulnerability May 22, 2025 RUSTSEC-2025-0037: Vulnerability in pingora-core Pingora Request Smuggling and Cache Poisoning