pingora-cache

crates.io1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting pingora-cachepage 1 of 1

CVE-2026-2836HIGHCVSS 8.1EG 8.1✓ Fixed in 0.8.0
2026-03-05
A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementation generates cache keys using only the URI path, excludi…

Check whether pingora-cache is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pingora-cache CVEs against the assets you own.

Start Free Scan →