Login Request a demo
RE
Product
req
by wojtekmach · last CVE Jun 8, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 1
Severity
All severities2Critical0High1Medium0Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add req to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49755
7.5
1%
Jun 8
Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies
Affected: 0.1.0 before 0.6.1; e37753741cbdc725e6aba3d977b380163bfc0ecb before 84977e5b1a83f26e749d55ad06e3625464af4e8d
CVE-2026-49756
3.7
0%
Jun 8
Multipart form-data header injection in Req via unescaped name/filename/content_type
Affected: 0.5.3 before 0.6.0; 60253dbe9436cb8e9c738f895032f2e87939b597 before 74506ff2c5addf74df85d79dc726e9b2e264a8ba
Showing 2