Faraday Project
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
đź“… Data spans from February 9, 2026 to present
3
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
38/100
low
Severity Distribution
Critical
0High
1Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SSRF
2
Most Affected Products
1. Faraday Project Faraday5
2. rubygems/faraday4
3. IBM IBM® Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data1
4. IBM Aspera Console1
Recent Vulnerabilities
See more →CVE-2026-54297
CVSS 7.5high
Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
6/19/2026
CVE-2026-33637
CVSS 6.5medium
Faraday: Protocol-relative URI objects still bypass host scoping (possible incomplete fix for GHSA-33mh-2634-fwr2)
5/18/2026
CVE-2026-25765
CVSS 5.8EPSS 0%medium
Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
2/9/2026
Monitor Faraday Project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.