Executive brief
HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
Affected products
- crates.io pingora-core
Junglewise Threat Intelligence
CVE-2026-2835: RUSTSEC-2026-0034 - HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
CVE-2026-2835 · Severity: medium · CVSS 4 · Published 2026-03-04
Technologies: pingora-core (crates.io). Vendors: crates.io.
Related threats
- Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
- Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0033 - HTTP Request Smuggling via Premature Upgrade
- Pingora update for MadeYouReset HTTP/2 vulnerability
- RUSTSEC-2025-0070 - Pingora MadeYouReset HTTP/2 vulnerability