What is GHSA-8vmp-v4pm-x3hq?

GHSA-8vmp-v4pm-x3hq is a security advisory published by GitHub Security Advisories with Critical severity. An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the...

Which CVE IDs does GHSA-8vmp-v4pm-x3hq cover?

GHSA-8vmp-v4pm-x3hq covers the following CVE IDs: CVE-2026-68006. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8vmp-v4pm-x3hq?

GHSA-8vmp-v4pm-x3hq has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-8vmp-v4pm-x3hqCriticalCVSS 9.1

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the...

Vendor

GitHub Security Advisories

Published

September 10, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-68006 →

📋 Description

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-68006
https://github.com/czx1111/cve/issues/1
https://github.com/advisories/GHSA-8vmp-v4pm-x3hq