Search results

RUSTSEC-2026-0104: Reachable panic in certificate revocation list parsing

Status: Open.

#868 In cloudflare/pingora;

· github-actions opened on Apr 23, 2026

HTTP/1.1 upstream keep-alive lost when following 3xx via response_filter error + outer retry loop

Status: Open.

#866 In cloudflare/pingora;

· kursadaltan opened on Apr 22, 2026

HTTP/2 graceful shutdown drops in-flight streams after GOAWAY with last_stream_id = MAX

Status: Open.

#865 In cloudflare/pingora;

· wymhuster opened on Apr 20, 2026

RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name

Status: Open.

#860 In cloudflare/pingora;

· github-actions opened on Apr 16, 2026

RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted

Status: Open.

#859 In cloudflare/pingora;

· github-actions opened on Apr 16, 2026

RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

Status: Open.

#856 In cloudflare/pingora;

· github-actions opened on Apr 12, 2026

response_body_filter not called after overriding 204/304 status in response_filter

bugSomething isn't workingSomething isn't working

Status: Open.

#852 In cloudflare/pingora;

· Erio-Harrison opened on Apr 9, 2026

why the body_bytes_sent is not equal to response content-length?

bugSomething isn't workingSomething isn't working

WIPWe are working on this feature internallyWe are working on this feature internally

Status: Open.

#846 In cloudflare/pingora;

· wujunzhuo opened on Mar 24, 2026

Notify-based shutdown in HttpProxy causes severe lock contention on multi-core / NUMA systems

enhancementNew feature or requestNew feature or request

Status: Open.

#844 In cloudflare/pingora;

· Masterlvng opened on Mar 23, 2026

RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

dependenciesPull requests that update a dependency filePull requests that update a dependency file

Status: Open.

#843 In cloudflare/pingora;

· github-actions opened on Mar 21, 2026

SSE (Server-Sent Events) response body not flushed to downstream on macOS

bugSomething isn't workingSomething isn't working

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#841 In cloudflare/pingora;

· janpoem opened on Mar 20, 2026

TLS: structured certificate selection result for async certificate callbacks

enhancementNew feature or requestNew feature or request

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#838 In cloudflare/pingora;

· dnstelecom opened on Mar 11, 2026