Skip to content
Llostisland
Products
| Product | CVEs | Exploited | Latest |
|---|
| faraday | 3 | – | Jun 24, 2026 |
Exploited and recent CVEs
-
CVE-2026-54297
High 7.5
Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
0.8%
-
CVE-2026-33637
None 0.0
Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)
0.3%
-
CVE-2026-25765
Medium 5.8
Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
0.4%