| Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent ConnectionsCVE-2026-47737 · GHSA-2VQW-3MP8-CGMX |
puma |
RubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion CVE-2026-47736 · GHSA-QPGP-93VX-G8V8 |
puma |
RubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Puma's header normalization allows for client to clobber proxy set headersCVE-2024-45614 · GHSA-9HF4-67FC-4VF4 |
Red Hat Satellite 6/rubygem-pumaRed Hat Satellite 6/satellite:el8/rubygem-puma |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puma HTTP Request/Response Smuggling vulnerabilityCVE-2023-40175 · GHSA-68XG-GQQM-VGJ8 |
Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8Red Hat Satellite 6/tfm-rubygem-puma |
Red HatRubyGems |
بحرانی
|
اصلاح گزارش شده |
|
| Puma HTTP Request/Response Smuggling vulnerabilityCVE-2024-21647 · GHSA-C2F4-CVQM-65W2 |
Red Hat Storage 3/rubygem-pumapuma |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| HTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11077 · GHSA-W64W-QQPH-5GXM |
CloudForms Management Engine 5/rubygem-pumaRed Hat Storage 3/rubygem-puma |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| HTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11076 · GHSA-X7JG-6PWG-FX5H |
CloudForms Management Engine 5/rubygem-pumaRed Hat Storage 3/rubygem-puma |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Puma with proxy which forwards LF characters as line endings could allow HTTP request smugglingCVE-2021-41136 · GHSA-48W2-RM65-62XX |
CloudForms Management Engine 5/rubygem-pumaRed Hat Storage 3/rubygem-puma |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attackCVE-2019-16770 · GHSA-7XX3-M584-X994 |
CloudForms Management Engine 5/rubygem-pumaRed Hat Software Collections/rh-ror50-rubygem-puma |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puma's Keepalive Connections Causing Denial Of ServiceCVE-2021-29509 · GHSA-Q28M-8XJW-8VR5 |
CloudForms Management Engine 5/rubygem-pumaRed Hat 3scale API Management Platform 2/system |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Puma used with Rails may lead to Information ExposureCVE-2022-23634 · GHSA-RMJ8-8HHH-GV5H |
CloudForms Management Engine 5/rubygem-pumaCloudForms Management Engine 5/rubygem-rails |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| HTTP Response Splitting (Early Hints) in PumaCVE-2020-5249 · GHSA-33VF-4XGG-9R58 |
CloudForms Management Engine 5/rubygem-pumaRed Hat Software Collections/rh-ror50-rubygem-puma |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puma vulnerable to HTTP Request SmugglingCVE-2022-24790 · GHSA-H99W-9Q5R-GJQ9 |
CloudForms Management Engine 5/rubygem-pumaRed Hat Satellite 6/tfm-rubygem-puma-plugin-systemd |
Red HatRubyGems |
بحرانی
|
اصلاح گزارش شده |
|
| HTTP Response Splitting in PumaCVE-2020-5247 · GHSA-84J7-475P-HP8V |
CloudForms Management Engine 5/rubygem-pumaRed Hat 3scale API Management Platform 2/system |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
