CVE-2026-68006

Puma (a Ruby application server) versions v.5.0.0 through before v.8.0.3 are affected by an issue in the ext/puma_http11/http11_parser.rl file that allows an attacker to execute arbitrary code . The fix is to upgrade to v.8.0.3 or later. No exploitation status or active in-the-wild usage is provi...