7 known security vulnerabilities

  • criticalGHSA-68xg-gqqm-vgj8(CVE-2023-40175)

    Puma HTTP Request/Response Smuggling vulnerability

Show 6 more vulnerabilities
1 critical2 high2 moderate1 low
  • criticalGHSA-h99w-9q5r-gjq9(CVE-2022-24790)

    Puma vulnerable to HTTP Request Smuggling

  • highGHSA-q28m-8xjw-8vr5(CVE-2021-29509)

    Puma's Keepalive Connections Causing Denial Of Service

  • highGHSA-rmj8-8hhh-gv5h(CVE-2022-23634)

    Puma used with Rails may lead to Information Exposure

  • moderateGHSA-9hf4-67fc-4vf4(CVE-2024-45614)

    Puma's header normalization allows for client to clobber proxy set headers

  • moderateGHSA-c2f4-cvqm-65w2(CVE-2024-21647)

    Puma HTTP Request/Response Smuggling vulnerability

  • lowGHSA-48w2-rm65-62xx(CVE-2021-41136)

    Puma with proxy which forwards LF characters as line endings could allow HTTP request smuggling

Puma is a simple, fast, threaded, and highly concurrent HTTP 1.1 server for Ruby/Rack applications. Puma is intended for use in both development and production environments. It's great for highly concurrent Ruby implementations such as Rubinius and JRuby as well as as providing process worker support to support CRuby well.

Required Ruby Version

>= 2.2

Authors

Evan Phoenix

Versions

  1. 8.0.3

    1. source

      1. 8.0.3 source November 13, 2026 (262 KB)

    2. java

      1. 8.0.3 multi-abi November 13, 2026 (290 KB)
  2. 8.0.2

    1. source

      1. 8.0.2 source May 26, 2026 (259 KB)

    2. java

      1. 8.0.2 multi-abi May 26, 2026 (287 KB)
  3. 8.0.1

    1. source

      1. 8.0.1 source April 26, 2026 (259 KB)

    2. java

      1. 8.0.1 multi-abi April 26, 2026 (287 KB)
  4. 8.0.0

    1. source

      1. 8.0.0 source April 09, 2026 (259 KB)

    2. java

      1. 8.0.0 multi-abi April 09, 2026 (288 KB)
  5. 7.2.2

    1. source

      1. 7.2.2 source November 13, 2026 (244 KB)

    2. java

      1. 7.2.2 multi-abi November 13, 2026 (267 KB)
  6. 5.2.1

    1. source

      1. 5.2.1 source February 05, 2021 (194 KB)

    2. java

      1. 5.2.1 multi-abi February 05, 2021 (215 KB)
Show all versions (369 total)

Pushed by

nateberkopec

SHA 256 checksum

← Previous version Next version →