Executive brief
Pingora MadeYouReset HTTP/2 vulnerability
Affected products
- crates.io pingora-core
Junglewise Threat Intelligence
CVE-2025-8671: RUSTSEC-2025-0070 - Pingora MadeYouReset HTTP/2 vulnerability
CVE-2025-8671 · Severity: info · Published 2025-09-17
Technologies: pingora-core (crates.io). Vendors: crates.io.
Related threats
- Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
- Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0034 - HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0033 - HTTP Request Smuggling via Premature Upgrade
- Pingora update for MadeYouReset HTTP/2 vulnerability