Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-2vqw-3mp8-cgmx
  • RubyGems/puma
 Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections 09 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-qpgp-93vx-g8v8
  • RubyGems/puma
 Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion 08 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-9hf4-67fc-4vf4
  • RubyGems/puma
 Puma's header normalization allows for client to clobber proxy set headers 20 Sep 2024
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-c2f4-cvqm-65w2
  • RubyGems/puma
 Puma HTTP Request/Response Smuggling vulnerability 08 Jan 2024
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-68xg-gqqm-vgj8
  • RubyGems/puma
 Puma HTTP Request/Response Smuggling vulnerability 18 Aug 2023
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-h99w-9q5r-gjq9
  • RubyGems/puma
 Puma vulnerable to HTTP Request Smuggling 30 Mar 2022
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-rmj8-8hhh-gv5h
  • RubyGems/puma
 Puma used with Rails may lead to Information Exposure 11 Feb 2022
  • Fix available
  • Severity - 8.0 (High)
GHSA-48w2-rm65-62xx
  • RubyGems/puma
 Puma with proxy which forwards LF characters as line endings could allow HTTP request smuggling 12 Oct 2021
  • Fix available
  • Severity - 3.7 (Low)
GHSA-q28m-8xjw-8vr5
  • RubyGems/puma
 Puma's Keepalive Connections Causing Denial Of Service 18 May 2021
  • Fix available
  • Severity - 7.5 (High)
GHSA-w64w-qqph-5gxm
  • RubyGems/puma
 HTTP Smuggling via Transfer-Encoding Header in Puma 22 May 2020
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-x7jg-6pwg-fx5h
  • RubyGems/puma
 HTTP Smuggling via Transfer-Encoding Header in Puma 22 May 2020
  • Fix available
  • Severity - 7.5 (High)
GHSA-33vf-4xgg-9r58
  • RubyGems/puma
 HTTP Response Splitting (Early Hints) in Puma 03 Mar 2020
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-84j7-475p-hp8v
  • RubyGems/puma
 HTTP Response Splitting in Puma 28 Feb 2020
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-7xx3-m584-x994
  • RubyGems/puma
 A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack 05 Dec 2019
  • Fix available
  • Severity - 5.3 (Medium)