Skip to content

Product

crates.io pingora-cache vulnerabilities

1 published CVE affecting crates.io pingora-cache, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest crates.io pingora-cache CVEs

Newest publication first

  1. CVE-2026-2836 Cache poisoning via insecure-by-default cache key

    Published
    HighCVSS 8.4 EPSS 0.40%

    A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementation generates cache keys using only the URI path, excluding critical factors such as the host header...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.