📦 Puma

CVE-2022-24790 is an HTTP request smuggling vulnerability in Puma HTTP server that allows attackers to bypass front-end proxies and send malicious requests directly to the application. This affects Ru...

This CVE describes an HTTP request smuggling vulnerability in Puma web server that allows attackers to bypass security controls by sending specially crafted HTTP requests. The vulnerability affects Pu...

This vulnerability in Puma web server allows clients to override proxy-set headers like X-Forwarded-For by sending underscore versions (X-Forwarded_For). This affects any users relying on proxy header...