CVE-2022-23634

score

<0.1

cvss

8.0

epss

2.1%

published

2022-02-11

kev added

—

first seen

2026-10-21

Puma prior to 5.6.2 may not always call close on the response body, and Rails prior to 7.0.2.2 depends on the response body being closed, causing potential information leakage, exploit requires specific versions of Puma and Rails.