Issues

• HeaderSerde round-trip drops HTTP version and custom reason phrase

  cloudflare/pingora#1064 · Filter by author gpu004 opened on Oct 21, 2026

• range_header_filter ignores Range when the range count equals max_multipart_ranges

  cloudflare/pingora#1063 · Filter by author gpu004 opened on Oct 21, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  cloudflare/pingora#1062 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  cloudflare/pingora#1061 · Filter by author github-actions opened on Oct 21, 2026

• Panic "capacity must be greater than zero" on first accepted connection with tokio 1.54

  WIP
  cloudflare/pingora#1059 · Filter by author tzilist opened on Oct 20, 2026
  1

• RUSTSEC-2024-0449: unsafe-libyaml is unmaintained

  cloudflare/pingora#1058 · Filter by author github-actions opened on Oct 20, 2026

• RUSTSEC-2024-0436: paste - no longer maintained

  cloudflare/pingora#1057 · Filter by author github-actions opened on Oct 20, 2026

• Per-peer CA is not part of the connection-reuse key

  cloudflare/pingora#1056 · Filter by author JounQin opened on Oct 19, 2026

• HTTP/1 body writer does not treat 205 Reset Content as bodyless

  cloudflare/pingora#1055 · Filter by author JounQin opened on Oct 18, 2026

• msrv: MSRV is now 1.88.0

  cloudflare/pingora#1053 · Filter by author Devel08 opened on Oct 18, 2026

• HTTP/1.1 websocket upgrade closed right after the 101 when the 101 is read before the request's end of body

  cloudflare/pingora#1050 · Filter by author mikef-eng opened on Oct 15, 2026

• Add cargo-fuzz targets for the HTTP/1 downstream request parser

  cloudflare/pingora#1049 · Filter by author ROY887 opened on Oct 10, 2026

• Expose HTTP/1.1 half-close tolerance (set_abort_on_close) via server configuration

  cloudflare/pingora#1045 · Filter by author acc0mplish opened on Oct 5, 2026

• H2 upstream: upstream_body_bytes_sent is never populated (no body_bytes_sent on the HTTP/2 client session)

  cloudflare/pingora#1044 · Filter by author acc0mplish opened on Oct 5, 2026

• HTTP/1 client TE parsing diverges from CPython http.client when multiple Transfer-Encoding headers are present (GHSA-hj7x sibling)

  cloudflare/pingora#1042 · Filter by author nikhilagrawalsf opened on Oct 4, 2026

• pingora-limits: Estimator::incr panics on overflow with overflow checks enabled

  cloudflare/pingora#1040 · Filter by author TeshanK opened on Oct 3, 2026

• Tests: seven cache and HTTP behaviours the unit tests don't pin down

  cloudflare/pingora#1035 · Filter by author Trenyx opened on Oct 1, 2026

• cache: background stale-while-revalidate subrequest fails for HTTP/2 downstream sessions

  cloudflare/pingora#1033 · Filter by author stillnovice opened on Sep 30, 2026

• [bug] Health checks have no total deadline: an endless response body stalls the load balancer

  cloudflare/pingora#1032 · Filter by author YZL0v3ZZ opened on Sep 30, 2026
  1

• [bug] Downstream HTTP/2 response-body writes have no deadline: a never-reading client parks the stream forever

  cloudflare/pingora#1031 · Filter by author YZL0v3ZZ opened on Sep 30, 2026

• [bug] Downstream HTTP/2 request-body reads have no deadline: stalled streams defeat h2_idle_timeout

  cloudflare/pingora#1029 · Filter by author YZL0v3ZZ opened on Sep 30, 2026

• [bug] HTTP/2 readiness reads have no deadline: a silent peer parks the connection forever

  cloudflare/pingora#1028 · Filter by author YZL0v3ZZ opened on Sep 30, 2026

• HTTP/2 connections leak when reused_http_session() races with release_http_session()

  cloudflare/pingora#1024 · Filter by author sebc119 opened on Sep 29, 2026

• pingora-core: unsound setenv during upstream TLS connector initialization can free environ under concurrent readers

  cloudflare/pingora#1022 · Filter by author YZL0v3ZZ opened on Sep 27, 2026

• h1: body read buffer lives for the whole request and is 64 KiB regardless of Content-Length

  Performance
  cloudflare/pingora#1020 · Filter by author mariojcr opened on Sep 25, 2026