What’s Vulnerable › Products

lostisland faraday vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your lostisland faraday version is affected

Latest lostisland faraday vulnerabilities

• CVE-2026-54297 — Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters (CVSS 7.5)
• CVE-2026-33637 — Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2) (CVSS 6.5)
• CVE-2026-25765 — Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url (CVSS 5.8)