Executive brief
Pingora Request Smuggling and Cache Poisoning
Affected products
- crates.io pingora-core
Junglewise Threat Intelligence
CVE-2025-4366: RUSTSEC-2025-0037 - Pingora Request Smuggling and Cache Poisoning
CVE-2025-4366 · Severity: medium · CVSS 4 · Published 2025-05-22
Technologies: pingora-core (crates.io). Vendors: crates.io.
Related threats
- Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
- Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0034 - HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0033 - HTTP Request Smuggling via Premature Upgrade
- Pingora update for MadeYouReset HTTP/2 vulnerability