FA
Product
faraday
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add faraday to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54297 | 7.5 | Jun 24 | Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters Affected: >= 1.0.0, < 1.10.6; >= 2.0.0.alpha.pre.1, < 2.14.3 |
| CVE-2026-33637 | 6.5 | May 19 | Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2) Affected: >= 2.0.0, <= 2.14.2 |
| CVE-2026-25765 | 5.8 | Feb 9 | Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url Affected: < 2.14.1 |
Showing 3