Security
فارسی
All products

Red Hat Storage 3/rubygem-puma

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Puma's header normalization allows for client to clobber proxy set headersCVE-2024-45614 · GHSA-9HF4-67FC-4VF4 Red Hat Satellite 6/rubygem-pumaRed Hat Satellite 6/satellite:el8/rubygem-puma Red HatRubyGems Medium Fix reported
Puma HTTP Request/Response Smuggling vulnerabilityCVE-2023-40175 · GHSA-68XG-GQQM-VGJ8 Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8Red Hat Satellite 6/tfm-rubygem-puma Red HatRubyGems Critical Fix reported
Puma HTTP Request/Response Smuggling vulnerabilityCVE-2024-21647 · GHSA-C2F4-CVQM-65W2 Red Hat Storage 3/rubygem-pumapuma Red HatRubyGems Medium Fix reported
HTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11077 · GHSA-W64W-QQPH-5GXM CloudForms Management Engine 5/rubygem-pumaRed Hat Storage 3/rubygem-puma Red HatRubyGems Medium Fix reported
HTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11076 · GHSA-X7JG-6PWG-FX5H CloudForms Management Engine 5/rubygem-pumaRed Hat Storage 3/rubygem-puma Red HatRubyGems High Fix reported
Puma with proxy which forwards LF characters as line endings could allow HTTP request smugglingCVE-2021-41136 · GHSA-48W2-RM65-62XX CloudForms Management Engine 5/rubygem-pumaRed Hat Storage 3/rubygem-puma Red HatRubyGems Low Fix reported
A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attackCVE-2019-16770 · GHSA-7XX3-M584-X994 CloudForms Management Engine 5/rubygem-pumaRed Hat Software Collections/rh-ror50-rubygem-puma Red HatRubyGems Medium Fix reported
Puma's Keepalive Connections Causing Denial Of ServiceCVE-2021-29509 · GHSA-Q28M-8XJW-8VR5 CloudForms Management Engine 5/rubygem-pumaRed Hat 3scale API Management Platform 2/system Red HatRubyGems High Fix reported
HTTP Response Splitting (Early Hints) in PumaCVE-2020-5249 · GHSA-33VF-4XGG-9R58 CloudForms Management Engine 5/rubygem-pumaRed Hat Software Collections/rh-ror50-rubygem-puma Red HatRubyGems Medium Fix reported
HTTP Response Splitting in PumaCVE-2020-5247 · GHSA-84J7-475P-HP8V CloudForms Management Engine 5/rubygem-pumaRed Hat 3scale API Management Platform 2/system Red HatRubyGems Medium Fix reported