We don’t use Puma in production if you install it following Discourse official Standard Installation.
We use the DELETE/PUT verbs across the app for every single install, and don’t see any problems, so I’d guess it’s something specific to your install.
Long shot, but do you have a WAF of some sort fronting this domain @Andrea_Giovacchini ?