crates.io/pingora-core CVE-2026-2833: critical 9.1, EPSS 0.67%

HTTP Request Smuggling via Premature Upgrade

Action: Upgrade pingora-core to 0.8.0 or later.

cargo update -p pingora-core --precise 0.8.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2026-0033
• nvd: CVE-2026-2833
• https://crates.io/crates/pingora-core
• https://rustsec.org/advisories/RUSTSEC-2026-0033.html
• https://blog.cloudflare.com/pingora-oss-smuggling-vulnerabilities/

CVE-2026-2833 · published 2026-03-04T12:00:00Z · modified 2026-03-09T21:00:08.842148Z · JSON