Cloudanix VulnDB

RUSTSEC-2026-0035

None

CVSS

—

EPSS

—

Published

Mar 4, 2026

CISA due date

—

The record

Cache poisoning via insecure-by-default cache key

Affected packages

Ecosystem	Package	Introduced	Fixed
crates.io	pingora-cache	0	0.8.0
crates.io	pingora-cache	0.0.0-0	0.8.0

Related vulnerabilities

CVE-2026-2836 A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s… Same vulnerability
GHSA-2m8c-2374-465f Duplicate Advisory: Cache poisoning via insecure-by-default cache key Also affects pingora-cache