CVE record · 1 source
CVE-2026-105299
CVSS 8.7Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to…
- Vendor
- GitHub
- Product
- github
- CVSS
- 8.7
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to…
Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removing the client's Connection header, other hop-by-hop…