Andrew Hauck

Fixing request smuggling vulnerabilities in Pingora OSS deployments

2026-03-09

Today we’re disclosing request smuggling vulnerabilities when our open source Pingora service is deployed as an ingress proxy and how we’ve fixed them in Pingora 0.8.0. ...

• 
  Edward Wang
• 
  Fei Deng
• 
  Andrew Hauck

Resolving a request smuggling vulnerability in Pingora

2025-05-22

Cloudflare patched a vulnerability (CVE-2025-4366) in the Pingora OSS framework, which exposed users of the framework and Cloudflare CDN’s free tier to potential request smuggling attacks....

• 
  Edward Wang
• 
  Andrew Hauck
• 
  Aki Shugaeva