Sign in Free account Free scan

faraday project records

3 published records for vendor faraday project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

26

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-918 Server-Side Request Forgery (SSRF)2
CWE-674 Uncontrolled Recursion1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-54297No exploit	Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parametersfaraday project · faraday · CWE-674 Pre-auth Denial of service	High7.5	—	0.7%	Jun 24, 2026
26Monitor	CVE-2026-33637No exploit	Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)faraday project · faraday · CWE-918 Pre-auth SSRF	Medium6.5	—	0.2%	May 19, 2026
23Monitor	CVE-2026-25765No exploit	Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_urlfaraday project · faraday · CWE-918 Pre-auth SSRF	Medium5.8	—	0.3%	Feb 9, 2026

CVE-2026-54297
30Monitor
Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
faraday project · faradayJun 24, 2026
CVE-2026-33637
26Monitor
Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- SSRF
faraday project · faradayMay 19, 2026
CVE-2026-25765
23Monitor
Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
MediumCVSS 5.8No exploitEPSS 0%
- Pre-auth
- SSRF
faraday project · faradayFeb 9, 2026