Executive brief
Pingora update for MadeYouReset HTTP/2 vulnerability
Affected products
- crates.io pingora-core
Junglewise Threat Intelligence
Pingora update for MadeYouReset HTTP/2 vulnerability
Severity: medium · CVSS 4 · Published 2025-09-17
Technologies: pingora-core (crates.io). Vendors: crates.io.
Related threats
- Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
- Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0034 - HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
- RUSTSEC-2026-0033 - HTTP Request Smuggling via Premature Upgrade
- RUSTSEC-2025-0070 - Pingora MadeYouReset HTTP/2 vulnerability