RUSTSEC-2026-0034
NoneCVSS
—
EPSS
—
Published
Mar 4, 2026
CISA due date
—
The record
HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | pingora-core | 0 | 0.8.0 |
| crates.io | pingora-core | 0.0.0-0 | 0.8.0 |
Related vulnerabilities
- CVE-2026-2835 An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of… Same vulnerability
- GHSA-262p-vjx5-45xh Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing Also affects pingora-core
- GHSA-f9v3-j2m7-4hpg Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade Also affects pingora-core
- CVE-2026-2833 An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of… Also affects pingora-core
- RUSTSEC-2026-0033 HTTP Request Smuggling via Premature Upgrade Also affects pingora-core