Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-bk4b-h5hu-2qeq
Summary
HTTP Smuggling via Transfer-Encoding Header in Puma
### Impact
This is a similar but different vulnerability to the one patched in 3.12.5 and 4.3.4.

A client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. 

If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request's body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client.

### Patches

The problem has been fixed in Puma 3.12.6 and Puma 4.3.5.

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [Puma](https://github.com/puma/puma)
* See our [security policy](https://github.com/puma/puma/security/policy)
Aliases
0
alias CVE-2020-11077
1
alias GHSA-w64w-qqph-5gxm
Fixed_packages
0
url pkg:deb/debian/puma@4.3.6-1?distro=trixie
purl pkg:deb/debian/puma@4.3.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@4.3.6-1%3Fdistro=trixie
1
url pkg:deb/debian/puma@4.3.8-1%2Bdeb11u2
purl pkg:deb/debian/puma@4.3.8-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fhu7-fyha-9khj
1
vulnerability VCID-nxhw-rdtz-zyar
2
vulnerability VCID-pvph-c6vu-qkhn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@4.3.8-1%252Bdeb11u2
2
url pkg:deb/debian/puma@4.3.8-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/puma@4.3.8-1%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fhu7-fyha-9khj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@4.3.8-1%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/puma@5.6.5-3%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/puma@5.6.5-3%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@5.6.5-3%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/puma@6.6.0-4?distro=trixie
purl pkg:deb/debian/puma@6.6.0-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@6.6.0-4%3Fdistro=trixie
5
url pkg:gem/gitlab-puma@4.3.5.gitlab.3
purl pkg:gem/gitlab-puma@4.3.5.gitlab.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fhu7-fyha-9khj
1
vulnerability VCID-gkf9-7a9x-nkh4
2
vulnerability VCID-jwun-grgg-2uet
3
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/gitlab-puma@4.3.5.gitlab.3
6
url pkg:gem/puma@3.12.6
purl pkg:gem/puma@3.12.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-fhu7-fyha-9khj
2
vulnerability VCID-gkf9-7a9x-nkh4
3
vulnerability VCID-jwun-grgg-2uet
4
vulnerability VCID-nxhw-rdtz-zyar
5
vulnerability VCID-pvph-c6vu-qkhn
6
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.12.6
7
url pkg:gem/puma@4.3.5
purl pkg:gem/puma@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-fhu7-fyha-9khj
2
vulnerability VCID-gkf9-7a9x-nkh4
3
vulnerability VCID-jwun-grgg-2uet
4
vulnerability VCID-nxhw-rdtz-zyar
5
vulnerability VCID-pvph-c6vu-qkhn
6
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.3.5
Affected_packages
0
url pkg:deb/debian/puma@3.6.0-1
purl pkg:deb/debian/puma@3.6.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-nxhw-rdtz-zyar
7
vulnerability VCID-pr2m-wx1b-hqbz
8
vulnerability VCID-pvph-c6vu-qkhn
9
vulnerability VCID-q37p-vzmm-aken
10
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@3.6.0-1
1
url pkg:deb/debian/puma@3.12.0-2%2Bdeb10u2
purl pkg:deb/debian/puma@3.12.0-2%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-nxhw-rdtz-zyar
7
vulnerability VCID-pr2m-wx1b-hqbz
8
vulnerability VCID-pvph-c6vu-qkhn
9
vulnerability VCID-q37p-vzmm-aken
10
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puma@3.12.0-2%252Bdeb10u2
2
url pkg:gem/gitlab-puma@3.0.0
purl pkg:gem/gitlab-puma@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bk4b-h5hu-2qeq
1
vulnerability VCID-euqw-bed6-z7d6
2
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/gitlab-puma@3.0.0
3
url pkg:gem/gitlab-puma@4.0.0
purl pkg:gem/gitlab-puma@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ap87-c4dc-zfcy
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-pr2m-wx1b-hqbz
4
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/gitlab-puma@4.0.0
4
url pkg:gem/gitlab-puma@4.3.1.gitlab.2
purl pkg:gem/gitlab-puma@4.3.1.gitlab.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ap87-c4dc-zfcy
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-fhu7-fyha-9khj
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-pr2m-wx1b-hqbz
7
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/gitlab-puma@4.3.1.gitlab.2
5
url pkg:gem/gitlab-puma@4.3.3.gitlab.2
purl pkg:gem/gitlab-puma@4.3.3.gitlab.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bk4b-h5hu-2qeq
1
vulnerability VCID-euqw-bed6-z7d6
2
vulnerability VCID-fhu7-fyha-9khj
3
vulnerability VCID-gkf9-7a9x-nkh4
4
vulnerability VCID-jwun-grgg-2uet
5
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/gitlab-puma@4.3.3.gitlab.2
6
url pkg:gem/puma@3.0.0
purl pkg:gem/puma@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.0.0
7
url pkg:gem/puma@3.0.1
purl pkg:gem/puma@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.0.1
8
url pkg:gem/puma@3.0.2
purl pkg:gem/puma@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.0.2
9
url pkg:gem/puma@3.1.0
purl pkg:gem/puma@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.1.0
10
url pkg:gem/puma@3.1.1
purl pkg:gem/puma@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.1.1
11
url pkg:gem/puma@3.2.0
purl pkg:gem/puma@3.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.2.0
12
url pkg:gem/puma@3.3.0
purl pkg:gem/puma@3.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.3.0
13
url pkg:gem/puma@3.4.0
purl pkg:gem/puma@3.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.4.0
14
url pkg:gem/puma@3.5.0
purl pkg:gem/puma@3.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.5.0
15
url pkg:gem/puma@3.5.1
purl pkg:gem/puma@3.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.5.1
16
url pkg:gem/puma@3.5.2
purl pkg:gem/puma@3.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.5.2
17
url pkg:gem/puma@3.6.0
purl pkg:gem/puma@3.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.6.0
18
url pkg:gem/puma@3.6.1
purl pkg:gem/puma@3.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.6.1
19
url pkg:gem/puma@3.6.2
purl pkg:gem/puma@3.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.6.2
20
url pkg:gem/puma@3.7.0
purl pkg:gem/puma@3.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.7.0
21
url pkg:gem/puma@3.7.1
purl pkg:gem/puma@3.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.7.1
22
url pkg:gem/puma@3.8.0
purl pkg:gem/puma@3.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.8.0
23
url pkg:gem/puma@3.8.1
purl pkg:gem/puma@3.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.8.1
24
url pkg:gem/puma@3.8.2
purl pkg:gem/puma@3.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.8.2
25
url pkg:gem/puma@3.9.0
purl pkg:gem/puma@3.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.9.0
26
url pkg:gem/puma@3.9.1
purl pkg:gem/puma@3.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.9.1
27
url pkg:gem/puma@3.10.0
purl pkg:gem/puma@3.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.10.0
28
url pkg:gem/puma@3.11.0
purl pkg:gem/puma@3.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.11.0
29
url pkg:gem/puma@3.11.1
purl pkg:gem/puma@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.11.1
30
url pkg:gem/puma@3.11.2
purl pkg:gem/puma@3.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.11.2
31
url pkg:gem/puma@3.11.3
purl pkg:gem/puma@3.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.11.3
32
url pkg:gem/puma@3.11.4
purl pkg:gem/puma@3.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.11.4
33
url pkg:gem/puma@3.12.0
purl pkg:gem/puma@3.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.12.0
34
url pkg:gem/puma@3.12.1
purl pkg:gem/puma@3.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.12.1
35
url pkg:gem/puma@3.12.2
purl pkg:gem/puma@3.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.12.2
36
url pkg:gem/puma@3.12.4
purl pkg:gem/puma@3.12.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-fhu7-fyha-9khj
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-nxhw-rdtz-zyar
7
vulnerability VCID-pvph-c6vu-qkhn
8
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.12.4
37
url pkg:gem/puma@3.12.5
purl pkg:gem/puma@3.12.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-fhu7-fyha-9khj
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-nxhw-rdtz-zyar
7
vulnerability VCID-pvph-c6vu-qkhn
8
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.12.5
38
url pkg:gem/puma@3.13
purl pkg:gem/puma@3.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ap87-c4dc-zfcy
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-pr2m-wx1b-hqbz
4
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@3.13
39
url pkg:gem/puma@4.0.0
purl pkg:gem/puma@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.0.0
40
url pkg:gem/puma@4.0.1
purl pkg:gem/puma@4.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.0.1
41
url pkg:gem/puma@4.1.0
purl pkg:gem/puma@4.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.1.0
42
url pkg:gem/puma@4.1.1
purl pkg:gem/puma@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.1.1
43
url pkg:gem/puma@4.2.0
purl pkg:gem/puma@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.2.0
44
url pkg:gem/puma@4.2.1
purl pkg:gem/puma@4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.2.1
45
url pkg:gem/puma@4.3.0
purl pkg:gem/puma@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
11
vulnerability VCID-tsrb-zgtb-8ybu
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.3.0
46
url pkg:gem/puma@4.3.1
purl pkg:gem/puma@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-ap87-c4dc-zfcy
2
vulnerability VCID-bk4b-h5hu-2qeq
3
vulnerability VCID-euqw-bed6-z7d6
4
vulnerability VCID-fhu7-fyha-9khj
5
vulnerability VCID-gkf9-7a9x-nkh4
6
vulnerability VCID-jwun-grgg-2uet
7
vulnerability VCID-nxhw-rdtz-zyar
8
vulnerability VCID-pr2m-wx1b-hqbz
9
vulnerability VCID-pvph-c6vu-qkhn
10
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.3.1
47
url pkg:gem/puma@4.3.3
purl pkg:gem/puma@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-fhu7-fyha-9khj
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-nxhw-rdtz-zyar
7
vulnerability VCID-pvph-c6vu-qkhn
8
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.3.3
48
url pkg:gem/puma@4.3.4
purl pkg:gem/puma@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5zm7-c7nu-quad
1
vulnerability VCID-bk4b-h5hu-2qeq
2
vulnerability VCID-euqw-bed6-z7d6
3
vulnerability VCID-fhu7-fyha-9khj
4
vulnerability VCID-gkf9-7a9x-nkh4
5
vulnerability VCID-jwun-grgg-2uet
6
vulnerability VCID-nxhw-rdtz-zyar
7
vulnerability VCID-pvph-c6vu-qkhn
8
vulnerability VCID-q37p-vzmm-aken
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/puma@4.3.4
References
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00034.html
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00034.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00038.html
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00038.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11077.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11077.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-11077
reference_id
reference_type
scores
0
value 0.00821
scoring_system epss
scoring_elements 0.74439
published_at 2026-04-18T12:55:00Z
1
value 0.00821
scoring_system epss
scoring_elements 0.74348
published_at 2026-04-01T12:55:00Z
2
value 0.00821
scoring_system epss
scoring_elements 0.74352
published_at 2026-04-02T12:55:00Z
3
value 0.00821
scoring_system epss
scoring_elements 0.74379
published_at 2026-04-04T12:55:00Z
4
value 0.00821
scoring_system epss
scoring_elements 0.74353
published_at 2026-04-07T12:55:00Z
5
value 0.00821
scoring_system epss
scoring_elements 0.74386
published_at 2026-04-08T12:55:00Z
6
value 0.00821
scoring_system epss
scoring_elements 0.74401
published_at 2026-04-09T12:55:00Z
7
value 0.00821
scoring_system epss
scoring_elements 0.74422
published_at 2026-04-11T12:55:00Z
8
value 0.00821
scoring_system epss
scoring_elements 0.74402
published_at 2026-04-12T12:55:00Z
9
value 0.00821
scoring_system epss
scoring_elements 0.74394
published_at 2026-04-13T12:55:00Z
10
value 0.00821
scoring_system epss
scoring_elements 0.74431
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-11077
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11077
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/puma/puma
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/puma/puma
7
reference_url https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22
8
reference_url https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm
9
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2020-11077.yml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2020-11077.yml
10
reference_url https://lists.debian.org/debian-lts-announce/2020/10/msg00009.html
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/10/msg00009.html
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SKIY5H67GJIGJL6SMFWFLUQQQR3EMVPR
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SKIY5H67GJIGJL6SMFWFLUQQQR3EMVPR
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SKIY5H67GJIGJL6SMFWFLUQQQR3EMVPR/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SKIY5H67GJIGJL6SMFWFLUQQQR3EMVPR/
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-11077
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-11077
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1842534
reference_id 1842534
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1842534
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972102
reference_id 972102
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972102
16
reference_url https://github.com/advisories/GHSA-w64w-qqph-5gxm
reference_id GHSA-w64w-qqph-5gxm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w64w-qqph-5gxm
17
reference_url https://usn.ubuntu.com/6682-1/
reference_id USN-6682-1
reference_type
scores
url https://usn.ubuntu.com/6682-1/
Weaknesses
0
cwe_id 444
name Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
description The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-bk4b-h5hu-2qeq