Executive brief
Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
Affected products
- crates.io pingora-core
Junglewise Threat Intelligence
Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
Severity: medium · CVSS 4 · Published 2026-03-05
Technologies: pingora-core (crates.io). Vendors: crates.io.
Related threats
- Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0034 - HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0033 - HTTP Request Smuggling via Premature Upgrade
- Pingora update for MadeYouReset HTTP/2 vulnerability
- RUSTSEC-2025-0070 - Pingora MadeYouReset HTTP/2 vulnerability