puma puma vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20204
3. 20212
4. 20222
5. 20231
6. 20242
7. 20262

Newest CVEs

• CVE-2026-47736

  Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

  puma · puma

  High7.5
• CVE-2026-47737

  Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

  puma · puma

  High7.5
• CVE-2024-45614

  Header normalization allows for client to clobber proxy set headers in Puma

  puma · puma

  Medium5.4
• CVE-2024-21647

  HTTP Request/Response Smuggling in puma

  puma · puma

  Medium5.9
• CVE-2023-40175

  Inconsistent Interpretation of HTTP Requests in puma

  puma · puma

  High7.3
• CVE-2022-24790

  HTTP Request Smuggling in puma

  puma · puma

  Critical9.1
• CVE-2022-23634

  Information Exposure when using Puma with Rails

  puma · puma

  High8.0
• CVE-2021-41136

  Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma

  puma · puma

  Low3.7
• CVE-2021-29509

  Keepalive Connections Causing Denial Of Service in puma

  puma · puma

  High7.5
• CVE-2020-11077

  HTTP Smuggling via Transfer-Encoding Header in Puma

  puma · puma

  Medium6.8