Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-98m9-hrrm-r99r
  • RubyGems/faraday
 Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters 19 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-5rv5-xj5j-3484
  • RubyGems/faraday
 Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping 18 May
  • Fix available
  • Severity - 0.0 (None)
GHSA-33mh-2634-fwr2
  • RubyGems/faraday
 Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url 09 Feb
  • Fix available
  • Severity - 5.8 (Medium)