How many cloudflare pingora CVEs are in CISA KEV?

None of cloudflare pingora's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of cloudflare pingora are affected?

12 distinct cloudflare pingora versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in cloudflare pingora CVEs?

cloudflare pingora's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-345 (Insufficient Verification of Data Authenticity).

How many critical cloudflare pingora vulnerabilities are there?

cloudflare pingora has 2 critical and 2 high-severity CVEs.

What is the average severity of cloudflare pingora CVEs?

The average CVSS base score across cloudflare pingora's scored CVEs is 8.6.

cloudflare pingora Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: cloudflare pingora vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

cloudflare pingora Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

cloudflare pingora has 4 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting cloudflare pingora, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of cloudflare pingora's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of cloudflare pingora's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No cloudflare pingora CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every cloudflare pingora version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.2.04 CVEs
0.3.04 CVEs
0.4.04 CVEs
0.5.03 CVEs
0.6.03 CVEs
0.7.03 CVEs

Version ranges

< 0.8.03 CVEs
< 0.5.01 CVE

Fixed in

0.8.03 CVEs
faac65b0c2a0bfdbfdc5f13a1591f53f3c15321a3 CVEs

Common weakness types

The CWE weakness categories most often found in cloudflare pingora CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many cloudflare pingora CVEs were published each year.

2025

2026

Other cloudflare products

Browse vulnerabilities for other products by cloudflare.

WARP19 CVEs cfrpki9 CVEs github.com/cloudflare/cfrpki9 CVEs octorpki9 CVEs quiche9 CVEs workers-sdk6 CVEs WARP Client4 CVEs wrangler4 CVEs

Frequently asked questions

Common questions about cloudflare pingora vulnerabilities.

How many CVEs does cloudflare pingora have?: cloudflare pingora has 4 published CVE records since 2025.
How many cloudflare pingora CVEs are in CISA KEV?: None of cloudflare pingora's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for cloudflare pingora vulnerabilities?: No cloudflare pingora CVEs currently have a tracked public exploit in this dataset.
Which versions of cloudflare pingora are affected?: 12 distinct cloudflare pingora versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in cloudflare pingora CVEs?: cloudflare pingora's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-345 (Insufficient Verification of Data Authenticity).
How many critical cloudflare pingora vulnerabilities are there?: cloudflare pingora has 2 critical and 2 high-severity CVEs.
What is the average severity of cloudflare pingora CVEs?: The average CVSS base score across cloudflare pingora's scored CVEs is 8.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track cloudflare pingora vulnerabilities

Monitor new cloudflare pingora vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing