VendorsFaraday Projectfaradayall versions
Vulnerabilities

Faraday Project Faraday

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-54297
Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
Published 2026-06-24 · Modified
7.5EPSS 0.008
CVE-2026-33637
Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)
Published 2026-05-19 · Analyzed
6.5EPSS 0.003
CVE-2026-25765
Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
Published 2026-02-09 · Analyzed
5.8EPSS 0.004