Skip to content
Threat Feed
Subscribe

Product

Faraday (<= 2.14.2)

1 brief RSS
high advisory

Faraday: Uncontrolled Recursion in NestedParamsEncoder Allows Stack Exhaustion DoS

An unauthenticated attacker can trigger a denial-of-service condition in applications using the Faraday Ruby library by sending deeply nested query parameters (CVE-2026-54297), leading to `SystemStackError` and application crashes due to uncontrolled recursion.

Faraday denial-of-service web-vulnerability ruby ghsa cve
2r 1t