Puma
Puma · 14 CVEs
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
Jul 14, 2026
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
Jul 14, 2026
Header normalization allows for client to clobber proxy set headers in Puma
Sep 19, 2024
HTTP Request/Response Smuggling in puma
Jan 8, 2024
Inconsistent Interpretation of HTTP Requests in puma
Aug 18, 2023
HTTP Request Smuggling in puma
Mar 30, 2022
Information Exposure when using Puma with Rails
Feb 11, 2022
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma
Oct 12, 2021
Keepalive Connections Causing Denial Of Service in puma
May 11, 2021
HTTP Smuggling via Transfer-Encoding Header in Puma
May 22, 2020
HTTP Smuggling via Transfer-Encoding Header in Puma
May 22, 2020
HTTP Response Splitting (Early Hints) in Puma
Mar 2, 2020
HTTP Response Splitting in Puma
Feb 28, 2020
Potential DOS attack in Puma
Dec 5, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-47736 | Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion | HIGH | 0.63% | Jul 14, 2026 |
| CVE-2026-47737 | Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections | HIGH | 0.27% | Jul 14, 2026 |
| CVE-2024-45614 | Header normalization allows for client to clobber proxy set headers in Puma | MEDIUM | 0.64% | Sep 19, 2024 |
| CVE-2024-21647 | HTTP Request/Response Smuggling in puma | HIGH | 0.96% | Jan 8, 2024 |
| CVE-2023-40175 | Inconsistent Interpretation of HTTP Requests in puma | CRITICAL | 0.85% | Aug 18, 2023 |
| CVE-2022-24790 | HTTP Request Smuggling in puma | CRITICAL | 2.19% | Mar 30, 2022 |
| CVE-2022-23634 | Information Exposure when using Puma with Rails | HIGH | 2.11% | Feb 11, 2022 |
| CVE-2021-41136 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma | LOW | 1.20% | Oct 12, 2021 |
| CVE-2021-29509 | Keepalive Connections Causing Denial Of Service in puma | HIGH | 1.60% | May 11, 2021 |
| CVE-2020-11077 | HTTP Smuggling via Transfer-Encoding Header in Puma | HIGH | 2.81% | May 22, 2020 |
| CVE-2020-11076 | HTTP Smuggling via Transfer-Encoding Header in Puma | HIGH | 4.09% | May 22, 2020 |
| CVE-2020-5249 | HTTP Response Splitting (Early Hints) in Puma | MEDIUM | 1.57% | Mar 2, 2020 |
| CVE-2020-5247 | HTTP Response Splitting in Puma | HIGH | 2.55% | Feb 28, 2020 |
| CVE-2019-16770 | Potential DOS attack in Puma | HIGH | 2.01% | Dec 5, 2019 |
Showing 1 to 14 of 14 CVEs