cna@cloudflare.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS cna@cloudflare.com
03
assessed vulnerabilities (73)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-105299US | — | — | ||
Summary
Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removi… | ||||
| CVE-2026-105298US | — | — | ||
Summary
Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the… | ||||
| CVE-2026-105297US | — | — | ||
Summary
Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size and no limit on concu… | ||||
| CVE-2026-11325US | — | — | ||
Description
Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src/index.ts` re… | ||||
| CVE-2026-12707US | — | — | ||
Summary
Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of post-handshake client migration events.
Impact
quiche s… | ||||
| CVE-2026-12523US | — | Exploit | ||
Summary
Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames.
Impact
HTTP/3… | ||||
| CVE-2026-14440US | — | — | ||
Description:
To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This au… | ||||
| CVE-2026-11941US | — | — | ||
Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions.
The “quiche_connection_id_iter_next” and “quiche_conn_retired_sci… | ||||
| CVE-2026-2836US | high8.1OT elevated | — | ||
A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementat… | ||||
| CVE-2026-2835US | critical9.1 | — | ||
An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1… | ||||
| CVE-2026-2833US | critical9.1 | — | ||
An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing… | ||||
| CVE-2026-3125US | medium6.5 | — | ||
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.T… | ||||
| CVE-2026-1229US | critical9.8 | — | ||
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas.
E… | ||||
| CVE-2026-1721US | — | — | ||
Summary
A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handler. The `error_description` query parameter was directly int… | ||||
| CVE-2026-1664US | — | — | ||
Summary
An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function within the Cloudflare Agents SDK. The issue occurs because the `… | ||||
| CVE-2026-0933US | critical9.9 | — | ||
SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed d… | ||||
| CVE-2025-13353US | medium5.5OT elevated | — | ||
In gokey versions <0.2.0,
a flaw in the seed decryption logic resulted in passwords incorrectly
being derived solely from the initial vector and the AES-GCM
authentication tag o… | ||||
| CVE-2025-7054US | medium6.5 | — | ||
Cloudflare quiche was discovered to be vulnerable to an infinite loop when sending packets containing RETIRE_CONNECTION_ID frames.
QUIC connections possess a set of connection ide… | ||||
| CVE-2025-4821US | — | — | ||
Impact
Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually sup… | ||||
| CVE-2025-4820US | — | — | ||
Impact
Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually sup… | ||||