2 known security vulnerabilities

  • highGHSA-2vqw-3mp8-cgmx(CVE-2026-47737)

    Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

Show 1 more vulnerability
1 high
  • highGHSA-qpgp-93vx-g8v8(CVE-2026-47736)

    Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

Puma is a simple, fast, threaded, and highly parallel HTTP 1.1 server for Ruby/Rack applications. Puma is intended for use in both development and production environments. It's great for highly parallel Ruby implementations such as Rubinius and JRuby as well as as providing process worker support to support CRuby well.

Required Ruby Version

>= 2.4

Authors

Evan Phoenix

Versions

  1. 8.0.2

    1. source

      1. 8.0.2 source May 26, 2026 (259 KB)

    2. java

      1. 8.0.2 multi-abi May 26, 2026 (287 KB)
  2. 8.0.1

    1. source

      1. 8.0.1 source April 26, 2026 (259 KB)

    2. java

      1. 8.0.1 multi-abi April 26, 2026 (287 KB)
  3. 8.0.0

    1. source

      1. 8.0.0 source April 09, 2026 (259 KB)

    2. java

      1. 8.0.0 multi-abi April 09, 2026 (288 KB)
  4. 7.2.1

    1. source

      1. 7.2.1 source May 27, 2026 (241 KB)

    2. java

      1. 7.2.1 multi-abi May 27, 2026 (269 KB)
  5. 7.2.0

    1. source

      1. 7.2.0 source January 21, 2026 (241 KB)

    2. java

      1. 7.2.0 multi-abi January 21, 2026 (264 KB)
  6. 6.4.3

    1. source

      1. 6.4.3 source September 19, 2024 (226 KB)

    2. java

      1. 6.4.3 multi-abi September 19, 2024 (249 KB)
Show all versions (365 total)

Pushed by

nateberkopec

SHA 256 checksum

← Previous version Next version →