CVE-2026-47737
1 advisory.
RubyGems/puma CVE-2026-47737: high 7.5, EPSS 0.18%
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
Action: Upgrade puma to 7.2.1 or later.
bundle update pumaAffected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.0.2 | - |
| 5.5.0 | 7.2.1 | - |
Fixed versions
| 8.0.2 | 7.2.1 |
Sources
- osv: GHSA-2vqw-3mp8-cgmx
- https://github.com/puma/puma/security/advisories/GHSA-2vqw-3mp8-cgmx
- https://github.com/puma/puma
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2026-47737.yml
- https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-47737
CVE-2026-47737 · published · modified · JSON