2 known security vulnerabilities
- highGHSA-98m9-hrrm-r99r(CVE-2026-54297)
Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
Show 1 more vulnerabilityShow fewer vulnerabilities1 moderate
- moderateGHSA-33mh-2634-fwr2(CVE-2026-25765)
Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
HTTP/REST API client library.
Required Ruby Version
>= 2.4
Authors
@technoweenie, @iMacTia, @olleolleolle
Versions
-
2.15.0
-
source
- 2.15.0 source October 16, 2026 (75.5 KB)
-
-
2.14.4
-
source
- 2.14.4 source September 15, 2026 (75 KB)
-
-
2.14.3
-
source
- 2.14.3 source June 16, 2026 (74 KB)
-
-
2.14.2
-
source
- 2.14.2 source May 15, 2026 (73.5 KB) vulnerable
-
-
2.14.1
-
source
- 2.14.1 source February 07, 2026 (73.5 KB) vulnerable
-
-
1.10.3
-
source
- 1.10.3 source January 18, 2023 (70 KB) vulnerable
-
