[ Vendor · 3 CVEs ]
Cloudflare
CVEs affecting Cloudflare published in the last 30 days, plus any Cloudflare CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105299 | 20 Oct 2026 | CVSS 8.7 | Cloudflare https://github.com/cloudflare/pingoraSummary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to… | |
| CVE-2026-105297 | 20 Oct 2026 | CVSS 7.5 | Cloudflare https://github.com/cloudflare/pingoraSummary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded… | |
| CVE-2026-105298 | 20 Oct 2026 | CVSS 6.3 | Cloudflare https://github.com/cloudflare/pingoraSummary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache… |