Skip to content

Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

Critical severity GitHub Reviewed Published Mar 5, 2026 in cloudflare/pingora • Updated Mar 9, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts