lostisland/faraday Security Advisories | GitStock

high2026-06-19

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

GHSA-98m9-hrrm-r99r · CVE-2026-54297

low2026-05-18

Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping

GHSA-5rv5-xj5j-3484 · CVE-2026-33637

medium2026-02-09

Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url

GHSA-33mh-2634-fwr2 · CVE-2026-25765