Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CGA-ghgf-wpqj-5j83
published 4 months ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | gitlab-rails-ce-18.9 | All versions |
Original advisory text
CGA-ghgf-wpqj-5j83
References
- https://github.com/puma/puma/releases/tag/v7.2.1 URL
- https://github.com/puma/puma/releases/tag/v8.0.2 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47737... Vendor Advisory
- https://github.com/puma/puma/security/advisories/GHSA-2vqw-3mp8-cgmx Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-47737 Vendor Advisory
- https://github.com/puma/puma/commit/439c6136d9c2275721b7864db3ee78af7c80889f Patch
- https://github.com/puma/puma/commit/ebe9db3929ab8299d19c8f5b41e8ef4f4b22fa58 Patch
- https://github.com/puma/puma/pull/3944 Patch
- https://github.com/puma/puma/pull/3947 Patch
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published9 Jun 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CGA-ghgf-wpqj-5j83 · OSV
Track software like this
Free during beta