Vulnerabilities in lostisland

3 results

CVE-2026-25765MEDIUMFaraday affected by SSRF via protocol-relative URL host override in build_exclusive_urlEPSS 0.4%CVE-2026-54297HIGHFaraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parametersEPSS 0.3%CVE-2026-33637NONEFaraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)EPSS 0.3%