pingora-core
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits | pingora-core | Rust / Cargo | High | Fix reported | |
| Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass | pingora-core | Rust / Cargo | Medium | Fix reported | |
| Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing | pingora-core | Rust / Cargo | Critical | Fix reported | |
| Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade | pingora-core | Rust / Cargo | Critical | Fix reported | |
| Pingora has a Request Smuggling Vulnerability | pingora-core | Rust / Cargo | High | Fix reported | |
| Pingora MadeYouReset HTTP/2 vulnerability | pingora-coreamphp/http-server | Rust / CargoComposer | Unknown | Fix reported | |
| Pingora update for MadeYouReset HTTP/2 vulnerability | pingora-core | Rust / Cargo | High | Fix reported |