Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/gitlab-puma@3.0.0
purl pkg:gem/gitlab-puma@3.0.0
Next non-vulnerable version 3.12.2
Latest non-vulnerable version 4.3.3
Risk
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-6gcd-m795-k3ft
Aliases:
CVE-2020-11076
GHSA-x7jg-6pwg-fx5h
4.3.5.gitlab.3
Affected by 3 other vulnerabilities.
VCID-njvx-231r-kudy
Aliases:
CVE-2019-16770
GHSA-7xx3-m584-x994
3.12.2
Affected by 0 other vulnerabilities.
4.3.1
Affected by 0 other vulnerabilities.
VCID-s21w-r5mn-s7e9
Aliases:
CVE-2020-11077
GHSA-w64w-qqph-5gxm
4.3.5.gitlab.3
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T19:15:32.013953+00:00 GitLab Importer Affected by VCID-6gcd-m795-k3ft https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/gitlab-puma/CVE-2020-11076.yml 38.6.0
2026-05-31T19:15:31.734528+00:00 GitLab Importer Affected by VCID-s21w-r5mn-s7e9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/gitlab-puma/CVE-2020-11077.yml 38.6.0
2026-05-31T19:14:57.702818+00:00 GitLab Importer Affected by VCID-njvx-231r-kudy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/gitlab-puma/CVE-2019-16770.yml 38.6.0