wojtekmach

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wojtekmach records in CISA KEV

No wojtekmach vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Req 2 records HIGH

Records

2 records in Req · all components

TI-2026-36666 CVE-2026-49755 · GHSA-655f-mp8p-96gv

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

HIGH 69

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb response bodies.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00596 Published 2026-06-08 Fixed in 0.6.1 CWE-409

TI-2026-36667 CVE-2026-49756 · GHSA-px9f-whj3-246m

Multipart form-data header injection in Req via unescaped name/filename/content_type

MEDIUM 44

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via attacker-influenced part metadata.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00207 Published 2026-06-08 Fixed in 0.6.0 CWE-93

Open these records in search →

Critical	0
High	1
Medium	0
Low	1
No CVSS	0