Download Latest Version
v8.0.2 source code.zip (579.0 kB)
Get an email when there's a new version of Puma
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| puma-8.0.2-java.gem | 2026-05-27 | 293.9 kB | |
| puma-8.0.2.gem | 2026-05-27 | 265.2 kB | |
| README.md | 2026-05-26 | 671 Bytes | |
| v8.0.2 source code.tar.gz | 2026-05-26 | 449.6 kB | |
| v8.0.2 source code.zip | 2026-05-26 | 579.0 kB | |
| Totals: 5 Items | 1.6 MB | 0 | |
- Bugfixes
- Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies ([#3944])
- Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections ([#3944])
Security advisories
- CVE-2026-47736 / GHSA-qpgp-93vx-g8v8: Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
- CVE-2026-47737 / GHSA-2vqw-3mp8-cgmx: Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections