Name: google-protobuf Version: 4.27.3 CVE: CVE-2024-7254 GHSA: GHSA-735f-pc8j-v9w8 Criticality: High URL: https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8 Title: protobuf-java has potential Denial of Service issue Solution: upgrade to '~> 3.25.5', '~> 4.27.5', '>= 4.28.2' Name: puma Version: 6.4.2 CVE: CVE-2024-45614 GHSA: GHSA-9hf4-67fc-4vf4 Criticality: Medium URL: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4 Title: Puma's header normalization allows for client to clobber proxy set headers Solution: upgrade to '~> 5.6.9', '>= 6.4.3' Vulnerabilities found!