PI
Product
Pingora
by Cloudflare · last CVE Mar 4, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch

Add Pingora to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2835
9.1
1%
Mar 4
HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
Affected: before 0.8.0
CVE-2026-2833
9.1
1%
Mar 4
HTTP Request Smuggling via Premature Upgrade
Affected: before 0.8.0
CVE-2026-2836
8.1
0%
Mar 4
Cache poisoning via insecure-by-default cache key
Affected: before 0.8.0
CVE-2025-4366
6.1
1%
May 22
Request Smuggling Vulnerability in Pingora
Affected: before 0.5.0
Showing 4