Vulnerabilities

TI-2026-39193 CVE-2026-54297 · GHSA-98m9-hrrm-r99r

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

HIGH 72

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00757 Published 2026-06-24 Partial fix · 1.10.6, 2.14.3 CWE-674

TI-2026-26018 CVE-2026-33637 · GHSA-5rv5-xj5j-3484

HIGH 68

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00272 Published 2026-05-19 Partial fix · 2.14.2 CWE-918

TI-2026-20832 CVE-2026-25765 · GHSA-33mh-2634-fwr2

LOW 32

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00393 Published 2026-02-09 Partial fix · 2.14.1, 1.10.5 CWE-918