Ppuma

Products

Exploited and recent CVEs

• CVE-2026-47736 High 7.5 Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion 0.3%
• CVE-2026-47737 High 7.5 Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections 0.2%
• CVE-2024-45614 Medium 5.4 Header normalization allows for client to clobber proxy set headers in Puma 0.6%
• CVE-2024-21647 Medium 5.9 HTTP Request/Response Smuggling in puma 1.0%
• CVE-2023-40175 High 7.3 Inconsistent Interpretation of HTTP Requests in puma 0.8%
• CVE-2022-24790 Critical 9.1 HTTP Request Smuggling in puma 2.2%
• CVE-2022-23634 High 8.0 Information Exposure when using Puma with Rails 2.1%
• CVE-2021-41136 Low 3.7 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma 1.2%
• CVE-2021-29509 High 7.5 Keepalive Connections Causing Denial Of Service in puma 1.6%
• CVE-2020-11077 Medium 6.8 HTTP Smuggling via Transfer-Encoding Header in Puma 2.9%
• CVE-2020-11076 High 7.5 HTTP Smuggling via Transfer-Encoding Header in Puma 4.1%
• CVE-2020-5249 Medium 6.5 HTTP Response Splitting (Early Hints) in Puma 1.6%
• CVE-2020-5247 Medium 6.5 HTTP Response Splitting in Puma 2.5%