Issues

• [bug] H2 upstream RST_STREAM(NO_ERROR) after an early response closes the downstream connection

  cloudflare/pingora#1115 · Filter by author gulldan opened on Nov 8, 2026

• [bug] Upstream TLS connector never resumes sessions: each new upstream connection does a full handshake

  cloudflare/pingora#1114 · Filter by author gulldan opened on Nov 8, 2026

• Support mbrotli and mzstd as alternative backends for br and zstd response compression

  cloudflare/pingora#1110 · Filter by author Mnwa opened on Nov 5, 2026

• pingora-limits: Rate panics on subtract overflow when threads race to reset it

  cloudflare/pingora#1104 · Filter by author RaphaelFakhri opened on Nov 3, 2026

• Tests: five load balancing, pool and eviction behaviours the unit tests don't pin down

  cloudflare/pingora#1100 · Filter by author Trenyx opened on Nov 2, 2026

• Retry buffer truncates at 64 KiB: request bodies above it can never be retried

  cloudflare/pingora#1087 · Filter by author ravishukla86044 opened on Oct 28, 2026

• HeaderSerde round-trip drops HTTP version and custom reason phrase

  cloudflare/pingora#1064 · Filter by author gpu004 opened on Oct 21, 2026

• range_header_filter ignores Range when the range count equals max_multipart_ranges

  cloudflare/pingora#1063 · Filter by author gpu004 opened on Oct 21, 2026

• RUSTSEC-2024-0449: unsafe-libyaml is unmaintained

  cloudflare/pingora#1058 · Filter by author github-actions opened on Oct 20, 2026
  1

• RUSTSEC-2024-0436: paste - no longer maintained

  cloudflare/pingora#1057 · Filter by author github-actions opened on Oct 20, 2026

• Per-peer CA is not part of the connection-reuse key

  cloudflare/pingora#1056 · Filter by author JounQin opened on Oct 19, 2026
  1

• HTTP/1 body writer does not treat 205 Reset Content as bodyless

  cloudflare/pingora#1055 · Filter by author JounQin opened on Oct 18, 2026

• msrv: MSRV is now 1.88.0

  cloudflare/pingora#1053 · Filter by author Devel08 opened on Oct 18, 2026

• HTTP/1.1 websocket upgrade closed right after the 101 when the 101 is read before the request's end of body

  cloudflare/pingora#1050 · Filter by author mikef-eng opened on Oct 15, 2026

• Add cargo-fuzz targets for the HTTP/1 downstream request parser

  cloudflare/pingora#1049 · Filter by author ROY887 opened on Oct 10, 2026

• Expose HTTP/1.1 half-close tolerance (set_abort_on_close) via server configuration

  cloudflare/pingora#1045 · Filter by author acc0mplish opened on Oct 5, 2026
  3

  

• H2 upstream: upstream_body_bytes_sent is never populated (no body_bytes_sent on the HTTP/2 client session)

  cloudflare/pingora#1044 · Filter by author acc0mplish opened on Oct 5, 2026
  1

• HTTP/1 client TE parsing diverges from CPython http.client when multiple Transfer-Encoding headers are present (GHSA-hj7x sibling)

  cloudflare/pingora#1042 · Filter by author nikhilagrawalsf opened on Oct 4, 2026

• pingora-limits: Estimator::incr panics on overflow with overflow checks enabled

  cloudflare/pingora#1040 · Filter by author TeshanK opened on Oct 3, 2026

• cache: background stale-while-revalidate subrequest fails for HTTP/2 downstream sessions

  cloudflare/pingora#1033 · Filter by author stillnovice opened on Sep 30, 2026

• [bug] Health checks have no total deadline: an endless response body stalls the load balancer

  cloudflare/pingora#1032 · Filter by author YZL0v3ZZ opened on Sep 30, 2026
  1

• [bug] Downstream HTTP/2 response-body writes have no deadline: a never-reading client parks the stream forever

  cloudflare/pingora#1031 · Filter by author YZL0v3ZZ opened on Sep 30, 2026

• [bug] Downstream HTTP/2 request-body reads have no deadline: stalled streams defeat h2_idle_timeout

  cloudflare/pingora#1029 · Filter by author YZL0v3ZZ opened on Sep 30, 2026

• [bug] HTTP/2 readiness reads have no deadline: a silent peer parks the connection forever

  cloudflare/pingora#1028 · Filter by author YZL0v3ZZ opened on Sep 30, 2026

• HTTP/2 connections leak when reused_http_session() races with release_http_session()

  cloudflare/pingora#1024 · Filter by author sebc119 opened on Sep 29, 2026