redhat/rubygem-puma vulnerabilities

Latest redhat/rubygem-puma CVEs

Newest publication first

1. CVE-2026-68006 puma: Puma: HTTP Request Smuggling via Underscore Header Name Confusion

   Published 2026-09-10

   Critical·CVSS 9.1 EPSS 0.53%

   An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file

2. CVE-2026-47736 Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

   Published 2026-07-14

   High·CVSS 7.5 EPSS 0.35% PoC

   Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, when PROXY protocol v1 support is enabled, Puma reads incoming bytes into an internal buffer while waiting for CRLF to determine whether a PROXY v1 line is present, allowing an attacker that c...

3. CVE-2026-47737 Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

   Published 2026-07-14

   High·CVSS 7.5 EPSS 0.18% PoC

   Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when set_remote_address proxy_protocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers af...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.