Fixing request smuggling vulnerabilities in Pingora OSS deployments
The Cloudflare Blog [Unofficial]
March 9, 2026
Today we’re disclosing request smuggling vulnerabilities when our open source Pingora service is deployed as an ingress proxy and how we’ve fixed them in Pingora 0.8.0.
Discussion in the ATmosphere