faraday

RubyGems · Package

3 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scopingCVE-2026-33637 · GHSA-5RV5-XJ5J-3484	Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8	Red HatRubyGems	Low	Fix reported	2026-09-10
Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parametersCVE-2026-54297 · GHSA-98M9-HRRM-R99R	Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8	Red HatRubyGems	High	Fix reported	2026-09-10
Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_urlCVE-2026-25765 · GHSA-33MH-2634-FWR2	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator	Red HatRubyGems	Medium	Fix reported	2026-09-10