lostisland faraday

• CVE-2026-54297 High 7.5 Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters 0.8%
• CVE-2026-33637 None 0.0 Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2) 0.3%
• CVE-2026-25765 Medium 5.8 Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url 0.4%