
Pingora fixes critical HTTP request smuggling in HTTP/1.0 and Transfer-Encoding parsing (CVE-2026-2835)
Cloudflare-published CVE-2026-2835 describes a critical Pingora request smuggling flaw that can desync proxy/backend request framing; upgrade to Pingora 0.8.0+.
NewsWeb SecurityInfrastructure
Yesterday