update puma for svm - Githubissues

zendesk / samson

Web interface for deployments, with plugin architecture and kubernetes support

Other

1.45k stars 234 forks source link

update puma for svm #4087

Closed grosser closed 5 months ago

grosser commented 5 months ago

Name: puma
Version: 5.6.7
CVE: CVE-2024-21647
GHSA: GHSA-c2f4-cvqm-65w2
Criticality: Medium
URL: https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2
Title: Puma HTTP Request/Response Smuggling vulnerability
Solution: upgrade to ~> 5.6.8, >= 6.4.2

zendesk / samson

update puma for svm #4087

Risks