Skip to content

CVE record · 1 source

CVE-2026-105298

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header.

Vendor: GitHub
Product: github

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

0

CVE NVD 12d ago

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header.

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI (session.req_header().uri) saw the…

CVE-2026-105298 GitHub