CVE-2026-47736
1 advisory.
RubyGems/puma CVE-2026-47736: high 7.5
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
Action: Upgrade puma to 7.2.1 or later.
bundle update pumaAffected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.0.2 | - |
| 5.5.0 | 7.2.1 | - |
Fixed versions
| 8.0.2 | 7.2.1 |
Sources
- osv: GHSA-qpgp-93vx-g8v8
- https://github.com/puma/puma/security/advisories/GHSA-qpgp-93vx-g8v8
- https://github.com/puma/puma
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2026-47736.yml
- https://www.cve.org/CVERecord?id=CVE-2026-47736
CVE-2026-47736 · published · modified · JSON