GHSA-262p-vjx5-45xh
NoneCVSS
—
EPSS
—
Published
Mar 5, 2026
CISA due date
—
The record
Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | pingora-core | 0 | 0.8.0 |
Related vulnerabilities
- GHSA-f9v3-j2m7-4hpg Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade Also affects pingora-core
- CVE-2026-2835 An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of… Also affects pingora-core
- CVE-2026-2833 An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of… Also affects pingora-core
- RUSTSEC-2026-0034 HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing Also affects pingora-core
- RUSTSEC-2026-0033 HTTP Request Smuggling via Premature Upgrade Also affects pingora-core
- CVE-2026-112212 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before… CWE-444
- CVE-2026-111750 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-444
- CVE-2026-88829 A flaw was found in BusyBox httpd's reverse proxy feature. CWE-444