HT
Product
https://github.com/cloudflare/pingora
by Cloudflare · last CVE Oct 20, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
3
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch

Add https://github.com/cloudflare/pingora to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105298
6.3
1%
Oct 20
Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
Affected: 0.1.0 before 0.9.0
Showing 1