3 known security vulnerabilities

  • highGHSA-98m9-hrrm-r99r(CVE-2026-54297)

    Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

Show 2 more vulnerabilities
1 moderate1 low
  • moderateGHSA-33mh-2634-fwr2(CVE-2026-25765)

    Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url

  • lowGHSA-5rv5-xj5j-3484(CVE-2026-33637)

    Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping

HTTP/REST API client library.

Required Ruby Version

>= 2.6

Authors

@technoweenie, @iMacTia, @olleolleolle

Versions

  1. 2.14.4

    1. source

      1. 2.14.4 source September 15, 2026 (75 KB)
  2. 2.14.3

    1. source

      1. 2.14.3 source June 16, 2026 (74 KB)
  3. 2.14.2

    1. source

      1. 2.14.2 source May 15, 2026 (73.5 KB)
  4. 2.14.1

    1. source

      1. 2.14.1 source February 07, 2026 (73.5 KB)
  5. 2.14.0

    1. source

      1. 2.14.0 source September 28, 2025 (73.5 KB)
  6. 2.7.10

    1. source

      1. 2.7.10 source July 06, 2023 (68.5 KB)
Show all versions (164 total)

Pushed by

iMacTia

SHA 256 checksum

← Previous version Next version →