Vulnerabilities > Puma > Puma > 5.4.0

DATE CVE VULNERABILITY TITLE RISK
2024-01-08 CVE-2024-21647 HTTP Request Smuggling vulnerability in Puma
Puma is a web server for Ruby/Rack applications built for parallelism.
network
low complexity
puma CWE-444
7.5
2023-08-18 CVE-2023-40175 HTTP Request Smuggling vulnerability in Puma
Puma is a Ruby/Rack web server built for parallelism.
network
low complexity
puma CWE-444
critical
9.8
2022-03-30 CVE-2022-24790 HTTP Request Smuggling vulnerability in multiple products
Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications.
network
low complexity
puma debian fedoraproject CWE-444
7.5
2022-02-11 CVE-2022-23634 Improper Resource Shutdown or Release vulnerability in multiple products
Puma is a Ruby/Rack web server built for parallelism.
network
high complexity
puma rubyonrails debian fedoraproject CWE-404
5.9
2021-10-12 CVE-2021-41136 HTTP Request Smuggling vulnerability in multiple products
Puma is a HTTP 1.1 server for Ruby/Rack applications.
network
high complexity
puma debian CWE-444
3.7