Skip to content
OpenAdvisories

Vendor

puma

14 known vulnerabilities.

Products

puma 14
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2024-45614 Public exploit

    Header normalization allows for client to clobber proxy set headers in Puma

    Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies (such as X-Forwarded-For) by providing a underscore version of the same header (X-Forwarded_For). Any users relying on proxy se…

    puma puma puma puma Debian Ubuntu RubyGems