LO
Vendor
lostisland
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54297 | FA faraday lostisland | 7.5 | Jun 24 | Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters |
| CVE-2026-33637 | FA faraday lostisland | 6.5 | May 19 | Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2) |
| CVE-2026-25765 | FA faraday lostisland | 5.8 | Feb 9 | Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url |