puma puma vulnerabilities
14 published CVEs name puma puma among the affected products.
- 14Published CVEs14 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47736
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
puma · puma
High7.5 - CVE-2026-47737
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
puma · puma
High7.5 - CVE-2024-45614
Header normalization allows for client to clobber proxy set headers in Puma
puma · puma
Medium5.4 - CVE-2024-21647
HTTP Request/Response Smuggling in puma
puma · puma
Medium5.9 - CVE-2023-40175
Inconsistent Interpretation of HTTP Requests in puma
puma · puma
High7.3 - CVE-2022-24790
HTTP Request Smuggling in puma
puma · puma
Critical9.1 - CVE-2022-23634
Information Exposure when using Puma with Rails
puma · puma
High8.0 - CVE-2021-41136
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma
puma · puma
Low3.7 - CVE-2021-29509
Keepalive Connections Causing Denial Of Service in puma
puma · puma
High7.5 - CVE-2020-11077
HTTP Smuggling via Transfer-Encoding Header in Puma
puma · puma
Medium6.8