Vulnerabilities in puma
12 resultsCVE-2020-11076HIGHHTTP Smuggling via Transfer-Encoding Header in PumaEPSS 4.1%CVE-2020-11077MEDIUMHTTP Smuggling via Transfer-Encoding Header in PumaEPSS 2.8%CVE-2020-5247MEDIUMHTTP Response Splitting in PumaEPSS 2.5%CVE-2022-24790CRITICALHTTP Request Smuggling in pumaEPSS 2.1%CVE-2022-23634HIGHInformation Exposure when using Puma with RailsEPSS 2.1%CVE-2019-16770MEDIUMPotential DOS attack in PumaEPSS 1.9%CVE-2021-29509HIGHKeepalive Connections Causing Denial Of Service in pumaEPSS 1.6%CVE-2020-5249MEDIUMHTTP Response Splitting (Early Hints) in PumaEPSS 1.6%CVE-2021-41136LOWInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in pumaEPSS 1.1%CVE-2024-21647MEDIUMHTTP Request/Response Smuggling in pumaEPSS 1.0%CVE-2023-40175HIGHInconsistent Interpretation of HTTP Requests in pumaEPSS 0.7%CVE-2024-45614MEDIUMHeader normalization allows for client to clobber proxy set headers in PumaEPSS 0.7%