pkg:RubyGems/faraday
3 total CVEsHIGH1MEDIUM1
✅ Check your installed version
All known vulnerabilities
HIGH7.5CVE-2026-54297Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters from 0, < 2.14.3
MEDIUM5.8CVE-2026-25765Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url >= 2.0.0, < 2.14.1
NONE0.0CVE-2026-33637Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping >= 2.0.0, < 2.14.2