Skip to content
Puma vulnerabilities
Newest
-
puma
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
CVE-2026-47737
Fix available
7.5 High
-
puma
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
CVE-2026-47736
Fix available
7.5 High
-
puma
Header normalization allows for client to clobber proxy set headers in Puma
CVE-2024-45614
Public exploitFix available
5.4 Medium
-
puma
HTTP Request/Response Smuggling in puma
CVE-2024-21647
Fix available
5.9 Medium
-
puma
Inconsistent Interpretation of HTTP Requests in puma
CVE-2023-40175
Fix available
7.3 High
-
puma, debian linux, fedoraproject fedora +2 more
HTTP Request Smuggling in puma
CVE-2022-24790
Fix available
9.1 Critical
-
puma, rubyonrails rails, debian linux +1 more +3 more
Information Exposure when using Puma with Rails
CVE-2022-23634
Fix available
8.0 High
-
puma, debian linux +1 more
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma
CVE-2021-41136
Fix available
3.7 Low
-
puma, debian linux +1 more
Keepalive Connections Causing Denial Of Service in puma
CVE-2021-29509
Fix available
7.5 High
-
puma, debian linux, fedoraproject fedora +1 more +3 more
HTTP Smuggling via Transfer-Encoding Header in Puma
CVE-2020-11077
Fix available
6.8 Medium
-
puma, debian linux, fedoraproject fedora +2 more
HTTP Smuggling via Transfer-Encoding Header in Puma
CVE-2020-11076
Public exploitFix available
7.5 High
-
puma
HTTP Response Splitting (Early Hints) in Puma
CVE-2020-5249
Fix available
6.5 Medium
-
puma, ruby-lang ruby, debian linux +1 more +3 more
HTTP Response Splitting in Puma
CVE-2020-5247
Fix available
6.5 Medium
-
puma, debian linux +1 more
Potential DOS attack in Puma
CVE-2019-16770
Fix available
5.3 Medium
-
puma pumatrac
The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which...
CVE-2017-8943
5.9 Medium