PU
Vendor
puma
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47736 | PU puma puma | 7.5 | Jul 14 | Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion |
| CVE-2026-47737 | PU puma puma | 7.5 | Jul 14 | Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections |
| CVE-2024-45614 | PU Puma Puma | 5.4 | Sep 19 | Puma is a Ruby/Rack web server built for parallelism |
| CVE-2024-21647 | PU Puma Puma | 7.5 | Jan 8 | Puma is a web server for Ruby/Rack applications built for parallelism |
| CVE-2023-40175 | PU Puma Puma | 9.8 | Aug 18 | Puma is a Ruby/Rack web server built for parallelism |
| CVE-2022-24790 | PU Puma Puma | 7.5 | Mar 30 | Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications |
| CVE-2022-23634 | PU Puma Puma | 5.9 | Feb 11 | Puma is a Ruby/Rack web server built for parallelism |
| CVE-2021-41136 | PU Puma Puma | 3.7 | Oct 12 | Puma is a HTTP 1.1 server for Ruby/Rack applications |
| CVE-2021-29509 | PU Puma Puma | 7.5 | May 11 | Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications |
| CVE-2020-11077 | PU Puma Puma | 7.5 | May 22 | In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client |
| CVE-2020-11076 | PU Puma Puma | 7.5 | May 22 | In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header |
| CVE-2020-5249 | PU Puma Puma | 6.5 | Mar 2 | In Puma (RubyGem) before 4.3.3 and 3.12.4, if an application using Puma allows untrusted input in an early-hints header, an attacker can use a carriage return character to end the… |
| CVE-2020-5247 | PU Puma Puma | 7.5 | Feb 28 | In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e |
| CVE-2019-16770 | PU Puma Puma | 7.5 | Dec 5 | In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack |
| CVE-2017-8943 | PU Pumatrac Puma | 5.9 | May 15 | The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information… |