Vendors / Cloudflare Records 70 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 44
Exploited now Cloudflare records in CISA KEV No Cloudflare vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00793 · Published 2026-03-04 · Fixed in 0.8.0 CWE-444
Priority MEDIUM 47
An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00669 · Published 2026-03-04 · Fixed in 0.8.0 CWE-444
Priority LOW 37
A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction.
CVSS 4.0 HIGH 8.4· Network · No auth · User interaction · EPSS 0.00396 · Published 2026-03-04 · Fixed in 0.8.0 CWE-345
Priority LOW 33
A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP requests to be injected via manipulated request bodies on cache HITs, leading to unauthorized request…
CVSS 4.0 HIGH 7.4· Network · No auth · User interaction · EPSS 0.00536 · Published 2025-05-22 · Fixed in 0.5.0 CWE-444
Open these records in search → All records by CVSS severity
5 44 18 3 0
THREATIST.IORead the docs