`req`

Ecosystem:
hex

Package URL:
pkg:hex/req

Total PRs:
199 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
86 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

EEF-CVE-2026-49755 GHSA-655f-mp8p-96gv CVE-2026-49755 HIGH published 2 days ago • updated 1 day ago

## Summary Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP server...

Multipart form-data header injection in Req via unescaped name/filename/content_type

EEF-CVE-2026-49756 GHSA-px9f-whj3-246m CVE-2026-49756 LOW published 2 days ago • updated 1 day ago

## Summary Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via a...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the mix group with 3 updates

erlef/beam-openssf-compliance-stats #30

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

chore(deps): bump the patch-updates group with 15 updates

zebbra/data_aggregator #874

0.5.10 → 0.5.15 Patch PR

Closed 11 months ago 1 comment

deps(deps): bump req from 0.5.14 to 0.5.15

agentjido/jido #59

0.5.14 → 0.5.15 Patch PR

Closed 11 months ago 2 comments

Bump req from 0.5.10 to 0.5.15

wearecws/chroma-v2-client #5

0.5.10 → 0.5.15 Patch PR

Closed 11 months ago 1 comment

Bump req from 0.5.14 to 0.5.15

LukasW01/db-brm #54

0.5.14 → 0.5.15 Patch PR

Closed 11 months ago 1 comment

chore(deps): bump req from 0.5.10 to 0.5.15

rodloboz/mistral #23

0.5.10 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.15

hez/brew-dash #497

0.5.12 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.14 to 0.5.15

jutonz/homepage #3774

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.15

martosaur/log_hog #20

0.5.12 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.14 to 0.5.15

riebeekn/musiclistings #161

0.5.14 → 0.5.15 Patch PR

Closed 11 months ago 1 comment

Bump req from 0.5.14 to 0.5.15

erlef/oid_certo #21

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

build(deps): bump req from 0.5.14 to 0.5.15

camatcode/ex_ftp #117

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.10 to 0.5.15

preciz/common_crawl #7

0.5.10 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.14 to 0.5.15

ug0/aliyun_util #63

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

build(deps): bump req from 0.5.14 to 0.5.15

Byzanteam/jet-plugin-sdk #134

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

build(deps): bump req from 0.5.14 to 0.5.15

camatcode/aura #88

0.5.14 → 0.5.15 Patch PR

Open 11 months ago 1 comment

Bump req from 0.5.10 to 0.5.15

mehr-schulferien-de/www.mehr-schulferien.de #754

0.5.10 → 0.5.15 Patch PR

Closed 11 months ago 3 comments

build(deps): bump req from 0.5.8 to 0.5.15

zacky1972/ex_task #49

0.5.8 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.14 to 0.5.15

eigr-labs/flame-k8s #33

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

build(deps): Bump req from 0.5.14 to 0.5.15

jesse-c/personal-site #153

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.15

mtrudel/bandit #507

0.5.12 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

ExWeb3/elixir_ethers #216

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.1 to 0.5.15

honeybadger-io/honeybadger-elixir #640

0.5.1 → 0.5.15 Patch PR

Open 11 months ago

build(deps): Bump req from 0.5.14 to 0.5.15

dwyl/labels #346

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

martosaur/instructor_lite #38

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.10 to 0.5.15

croesnick/todoist-mcp-server-ex #4

0.5.10 → 0.5.15 Patch PR

Open 11 months ago 2 comments

chore(deps): bump req from 0.5.12 to 0.5.15

tgrk/ex_oura #26

0.5.12 → 0.5.15 Patch PR

Merged 11 months ago 1 comment

Bump the production-dependencies group with 7 updates

ringvold/get5_api #178

0.5.14 → 0.5.15 Patch PR

Closed 11 months ago 1 comment

Bump req from 0.5.11 to 0.5.15

sgerrand/ex_pdf_shift #10

0.5.11 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

erlef/mix-dependency-submission #150

0.5.14 → 0.5.15 Patch PR

Open 11 months ago 1 comment

Bump req from 0.5.14 to 0.5.15

frerich/auto_updater #7

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.14 to 0.5.15

swoosh/swoosh #1056

0.5.14 → 0.5.15 Patch PR

Open 11 months ago

build(deps): bump req from 0.5.12 to 0.5.15

mbta/ride_along #203

0.5.12 → 0.5.15 Patch PR

Open 11 months ago

Bump req from 0.5.10 to 0.5.14

LukasW01/db-brm #48

0.5.10 → 0.5.14 Patch PR

Merged 11 months ago

deps(deps): bump req from 0.5.12 to 0.5.14

agentjido/jido #54

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago 1 comment

build(deps): Bump req from 0.5.12 to 0.5.14

jesse-c/personal-site #151

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump the non-security group with 2 updates

aj-foster/region-manager #88

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14

ExWeb3/elixir_ethers #214

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.10 to 0.5.14

croesnick/todoist-mcp-server-ex #3

0.5.10 → 0.5.14 Patch PR

Open 11 months ago 1 comment

build(deps): Bump req from 0.5.11 to 0.5.14

dwyl/labels #344

0.5.11 → 0.5.14 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.12 to 0.5.14

tgrk/ex_oura #25

0.5.12 → 0.5.14 Patch PR

Closed 11 months ago 1 comment

deps(deps): bump req from 0.5.10 to 0.5.14

agentjido/jido_ai #46

0.5.10 → 0.5.14 Patch PR

Closed 11 months ago 3 comments

build(deps): bump req from 0.5.12 to 0.5.14

mbta/ride_along #201

0.5.12 → 0.5.14 Patch PR

Open 11 months ago 3 comments

chore(deps): bump req from 0.5.12 to 0.5.14 in /sdk/elixir in the sdk-elixir group

dagger/dagger #10687

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago 3 comments

chore(deps): bump req from 0.5.12 to 0.5.14 in /sdk/elixir in the sdk-elixir group

sipsma/dagger #1075

0.5.12 → 0.5.14 Patch PR

Open 11 months ago 1 comment

Bump req from 0.5.10 to 0.5.14

wearecws/chroma-v2-client #4

0.5.10 → 0.5.14 Patch PR

Closed 11 months ago 1 comment

build(deps): Bump req from 0.5.6 to 0.5.14 in /site

jesse-c/rom-to-the-com #20

0.5.6 → 0.5.14 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.12 to 0.5.14 in the prod group

lud/aoc #39

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14 in /ui

evercam/ex_nvr #739

0.5.12 → 0.5.14 Patch PR

Open 11 months ago 1 comment

Bump req from 0.5.10 to 0.5.14 in /lux

Spectral-Finance/lux #295

0.5.10 → 0.5.14 Patch PR

Open 11 months ago 1 comment

Package Details

Name:	`req`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/req`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All hex Advisories

Package Information

Description:

Req is a batteries-included HTTP client for Elixir.

Repository:	https://github.com/wojtekmach/req
Homepage:	https://hexdocs.pm/req/changelog.html
Latest Release:	`0.5.10` about 1 year ago
Dependent Repos:	78
Dependent Packages:	135
Downloads:	6,552,430
Ranking:	Top 1.8218% by dependent repos Top 3.1062% by downloads Top 0.2949% by dependent pkgs

PR Status

Open 88 (44.2%)

Merged 49 (24.6%)

Closed 61 (30.7%)

PR Types

Minor 4 (2.0%)

Patch 194 (97.5%)