{"action":"Upgrade pingora-core to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0.0.0-0"}],"component":"pingora-core","cve_ids":["CVE-2025-8671"],"ecosystem":"crates.io","epss":0.03621,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-mrjm-qq9m-9mjq","id":"tcs_01M5KFA4MZZXM7EET30DBYCXFF","modified_at":"2025-09-18T07:27:06.954909Z","published_at":"2025-09-17T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0070","https://crates.io/crates/pingora-core","https://rustsec.org/advisories/RUSTSEC-2025-0070.html","https://github.com/cloudflare/pingora/security/advisories/GHSA-393w-9x6h-8gc7","https://nvd.nist.gov/vuln/detail/CVE-2025-8671","https://blog.cloudflare.com/madeyoureset-an-http-2-vulnerability-thwarted-by-rapid-reset-mitigations/"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0070","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0070"},{"source":"nvd","source_id":"CVE-2025-8671","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8671"}],"summary":"Pingora MadeYouReset HTTP/2 vulnerability"}