StackRadarChart IndexLive demo

CVE-2023-40175

Critical

Advisory

Published 18 Aug 2023In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.008; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 16; of 17,781 indexed, latest versions
Container images: 15; deployed by those charts
Fix available: 1 of 1; affected package

Puma HTTP Request/Response Smuggling vulnerability

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 15 images.

Affected package	Affected versions	Fixed in	Images
pumagem	3.11.4, 3.12.0, 3.12.1, 3.12.6+8 more	5.6.7	15

OSV records: GHSA-68xg-gqqm-vgj8

Charts affected

16 by stars

Chart

Latest

Affected images

Radar Score

kubernetes-loggingkubernetes-logging

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	puma@5.6.6	5.6.7

Open the chart page →

10,530

uffizzi-appuffizzi-app

1 of 14 See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
uffizzi/app :latest	66e9e3937c60	puma@4.3.11	5.6.7

Open the chart page →

19,337

pact-brokeralmorgv

1 of 1 See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	puma@3.12.6	5.6.7

Open the chart page →

4,995

mastodondefault-gh

1 of 3 See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	puma@5.6.5	5.6.7

Open the chart page →

5,056

zammaddevplayer0

1 of 4 See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
zammad/zammad-docker-compose :zammad-4.1.0-31	2808e2dfa810	puma@4.3.8	5.6.7

Open the chart page →

6,110

docker-registry-browsergmelillo

1 of 1 See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
klausmeyer/docker-registry-browser :1.3.5	430a440d95af	puma@5.0.2	5.6.7

Open the chart page →

4,108

openprojecthomeenterpriseinc

1 of 1 See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
openproject/community :12.0.2	734743d11094	puma@5.5.2	5.6.7

Open the chart page →

6,810

logstashromanow-helm-charts

1 of 1 See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
library/logstash :7.17.8	17a4f64e9cf5	puma@5.6.5	5.6.7

Open the chart page →

7,529

honeywell-exporterbryanalves

1 of 1 See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	puma@3.11.4	5.6.7

Open the chart page →

5,437

smart-exporterbryanalves

1 of 1 See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
bryanalves/smart_exporter :0.2	af47dfbb9413	puma@3.12.0	5.6.7

Open the chart page →

4,131

pact-brokercloud-native-toolkit

1 of 1 See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	puma@5.6.4	5.6.7

Open the chart page →

2,814

docker-registry-browsergtaylor

1 of 1 See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
klausmeyer/docker-registry-browser :1.4.0	bdc4c6b8595b	puma@5.5.0	5.6.7

Open the chart page →

3,564

1 of 1 See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	puma@5.6.4	5.6.7

Open the chart page →

12,791

danbooru-stackmy0n

1 of 4 See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	puma@5.6.4	5.6.7

Open the chart page →

12,791

pact-brokerqamatic

1 of 2 See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.32.0-2	062d6c710099	puma@3.12.1	5.6.7

Open the chart page →

3,533

mastodonrivals-space

1 of 3 See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-40175.

Container image	Digest	Package	Fixed in
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	puma@5.6.5	5.6.7

Open the chart page →

6,026

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	puma@5.6.4	5.6.7	2
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	puma@3.11.4	5.6.7	1
bryanalves/smart_exporter :0.2	af47dfbb9413	puma@3.12.0	5.6.7	1
klausmeyer/docker-registry-browser :1.3.5	430a440d95af	puma@5.0.2	5.6.7	1
klausmeyer/docker-registry-browser :1.4.0	bdc4c6b8595b	puma@5.5.0	5.6.7	1
library/logstash :7.17.8	17a4f64e9cf5	puma@5.6.5	5.6.7	1
openproject/community :12.0.2	734743d11094	puma@5.5.2	5.6.7	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	puma@5.6.6	5.6.7	1
pactfoundation/pact-broker :2.32.0-2	062d6c710099	puma@3.12.1	5.6.7	1
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	puma@3.12.6	5.6.7	1
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	puma@5.6.4	5.6.7	1
uffizzi/app :latest	66e9e3937c60	puma@4.3.11	5.6.7	1
zammad/zammad-docker-compose :zammad-4.1.0-31	2808e2dfa810	puma@4.3.8	5.6.7	1
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	puma@5.6.5	5.6.7	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	puma@5.6.5	5.6.7	1