`req`

Ecosystem:
hex

Package URL:
pkg:hex/req

Total PRs:
199 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
86 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

EEF-CVE-2026-49755 GHSA-655f-mp8p-96gv CVE-2026-49755 HIGH published 2 days ago • updated 1 day ago

## Summary Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP server...

Multipart form-data header injection in Req via unescaped name/filename/content_type

EEF-CVE-2026-49756 GHSA-px9f-whj3-246m CVE-2026-49756 LOW published 2 days ago • updated 1 day ago

## Summary Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via a...

Recent PRs

RSS Feed

chore(deps): bump req from 0.5.17 to 0.5.18

albertorestifo/trenino #111

0.5.17 → 0.5.18 Patch PR

Open 16 days ago 1 comment

deps(deps): bump req from 0.5.17 to 0.5.18

agentjido/jido_action #178

0.5.17 → 0.5.18 Patch PR

Open 16 days ago 1 comment

chore(deps): bump req from 0.5.17 to 0.5.18

hyperpolymath/squisher-corpus #12

0.5.17 → 0.5.18 Patch PR

Open 20 days ago 1 comment

chore: bump the sdk-elixir group across 1 directory with 4 updates

TomChv/dagger #545

0.5.15 → 0.5.17 Patch PR

Open about 1 month ago 2 comments

Bump the mix-production-dependencies group across 1 directory with 5 updates

DangThanhWang/test_monitor #128

0.5.16 → 0.5.17 Patch PR

Open 3 months ago 1 comment

chore(deps): Bump the minor-and-patch group across 1 directory with 15 updates

rachel-multiverse/rachel-phoenix #9

0.5.15 → 0.5.17 Patch PR

Closed 4 months ago 2 comments

chore(deps): Bump req from 0.5.16 to 0.5.17

dwyl/image-classifier #227

0.5.16 → 0.5.17 Patch PR

Open 4 months ago 1 comment

Bump the mix-production-dependencies group across 1 directory with 5 updates

DangThanhWang/test_monitor #60

0.5.16 → 0.5.17 Patch PR

Closed 4 months ago 1 comment

deps(deps): bump req from 0.5.16 to 0.5.17

agentjido/llm_db #81

0.5.16 → 0.5.17 Patch PR

Open 5 months ago 2 comments

Bump req from 0.5.16 to 0.5.17

pepsico-ecommerce/snowflex #136

0.5.16 → 0.5.17 Patch PR

Open 5 months ago 1 comment

Bump req from 0.5.16 to 0.5.17

johantell/moxinet #78

0.5.16 → 0.5.17 Patch PR

Closed 5 months ago 1 comment

build(deps): bump req from 0.5.16 to 0.5.17 in /orchestrator

Alfinjohnson/superx #8

0.5.16 → 0.5.17 Patch PR

Open 5 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 4 updates

srdarknighter/opentelemetry---observability #29

0.5.16 → 0.5.17 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 11 updates

AcheampongStephen/OpenTelemetry #87

0.5.15 → 0.5.16 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 6 updates

yash-dagknows/e-com-app #9

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

Bump the mix-production-dependencies group across 1 directory with 6 updates

diki-haryadi/opentelemetry-demo #37

0.5.15 → 0.5.16 Patch PR

Open 6 months ago 2 comments

build(deps): bump the mix-production-dependencies group across 1 directory with 5 updates

monoscope-tech/oteldemo #46

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the prod group with 2 updates

doomspork/luagents #20

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 6 updates

laurentpf5/opentelemetry-nginx-demo #149

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 10 updates

laurentpf5/opentelemetry-nginx-demo #148

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 7 updates

BramVerkuijlen/Minimal-OTel-Demo #44

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 7 updates

AcheampongStephen/OpenTelemetry #69

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump req from 0.5.15 to 0.5.16

Hydepwns/raxol #75

0.5.15 → 0.5.16 Patch PR

Closed 6 months ago 3 comments

Bump the mix-production-dependencies group across 1 directory with 4 updates

apcurrier/otel-demo-coralogix #38

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 1 comment

Bump the mix-production-dependencies group across 1 directory with 4 updates

diki-haryadi/opentelemetry-demo #21

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 2 comments

build(deps): bump the mix-production-dependencies group across 1 directory with 11 updates

AcheampongStephen/OpenTelemetry #63

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 1 comment

deps(deps): bump req from 0.5.15 to 0.5.16

agentjido/jido_action #36

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 4 comments

chore: bump the sdk-elixir group across 1 directory with 3 updates

TomChv/dagger #509

0.5.15 → 0.5.16 Patch PR

Open 7 months ago 4 comments

Bump req from 0.5.15 to 0.5.16

nicholasbair/ex_nylas #353

0.5.15 → 0.5.16 Patch PR

Open 7 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 3 updates

monoscope-tech/oteldemo #31

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 2 updates

open-telemetry/opentelemetry-demo #2744

0.5.15 → 0.5.16 Patch PR

Open 7 months ago 2 comments

Bump req from 0.5.10 to 0.5.16

Beam-Maintenance/wled #14

0.5.10 → 0.5.16 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the mix-production-dependencies group across 1 directory with 11 updates

AcheampongStephen/OpenTelemetry #58

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 2 comments

Bump the mix-production-dependencies group across 1 directory with 3 updates

apcurrier/otel-demo-coralogix #21

0.5.15 → 0.5.16 Patch PR

Open 7 months ago 3 comments

Bump req from 0.5.15 to 0.5.16

pepsico-ecommerce/snowflex #126

0.5.15 → 0.5.16 Patch PR

Open 7 months ago 1 comment

Bump the elixir-dependencies group across 1 directory with 4 updates

RicoTrevisan/pled #23

0.5.15 → 0.5.16 Patch PR

Open 7 months ago 1 comment

Bump req from 0.5.15 to 0.5.16

erlef/mix-dependency-submission #193

0.5.15 → 0.5.16 Patch PR

Closed 7 months ago 3 comments

deps(deps): bump the minor-and-patch group across 1 directory with 6 updates

croesnick/taskbeam #9

0.4.14 → 0.5.15 Minor PR

Open 7 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 6 updates

croesnick/taskbeam #6

0.4.14 → 0.5.15 Minor PR

Open 8 months ago 1 comment

Bump the production-dependencies group across 1 directory with 14 updates

ringvold/get5_api #185

0.5.14 → 0.5.15 Patch PR

Open 8 months ago

Bump req from 0.5.10 to 0.5.15

Edge-Payment-Technologies/edge-elixir-sdk #18

0.5.10 → 0.5.15 Patch PR

Open 9 months ago

Bump the production-dependencies group across 1 directory with 12 updates

ringvold/get5_api #181

0.5.14 → 0.5.15 Patch PR

Open 10 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 5 updates

croesnick/taskbeam #4

0.4.14 → 0.5.15 Minor PR

Open 10 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 6 updates

zebbra/data_aggregator #886

0.5.10 → 0.5.15 Patch PR

Open 10 months ago 1 comment

Bump the production-dependencies group with 3 updates

leandrocp/req_embed #19

0.5.10 → 0.5.15 Patch PR

Open 10 months ago

Bump the production-dependencies group with 11 updates

ringvold/get5_api #179

0.5.14 → 0.5.15 Patch PR

Open 10 months ago

deps(deps): bump the minor-and-patch group across 1 directory with 4 updates

croesnick/taskbeam #2

0.4.14 → 0.5.15 Minor PR

Closed 10 months ago 2 comments

Bump the production-dependencies group with 3 updates

leandrocp/req_embed #16

0.5.10 → 0.5.15 Patch PR

Open 10 months ago 1 comment

chore(deps): bump req from 0.5.11 to 0.5.15

mrdotb/disco-log #99

0.5.11 → 0.5.15 Patch PR

Open 10 months ago

chore(deps): bump the patch-updates group across 1 directory with 6 updates

zebbra/data_aggregator #879

0.5.10 → 0.5.15 Patch PR

Open 10 months ago 1 comment

Package Details

Name:	`req`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/req`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All hex Advisories

Package Information

Description:

Req is a batteries-included HTTP client for Elixir.

Repository:	https://github.com/wojtekmach/req
Homepage:	https://hexdocs.pm/req/changelog.html
Latest Release:	`0.5.10` about 1 year ago
Dependent Repos:	78
Dependent Packages:	135
Downloads:	6,552,430
Ranking:	Top 1.8218% by dependent repos Top 3.1062% by downloads Top 0.2949% by dependent pkgs

PR Status

Open 88 (44.2%)

Merged 49 (24.6%)

Closed 61 (30.7%)

PR Types

Minor 4 (2.0%)

Patch 194 (97.5%)