| Bug | stretch | buster | bullseye | bookworm | sid | Description |
|---|
| CVE-2021-41136 | vulnerable (no DSA) | vulnerable | vulnerable | fixed | fixed | Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to version ... |
| CVE-2021-29509 | fixed | vulnerable | fixed | fixed | fixed | Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The f ... |
| CVE-2020-5247 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application us ... |
| CVE-2019-16770 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client coul ... |