`req`

Ecosystem:
hex

Package URL:
pkg:hex/req

Total PRs:
199 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
86 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

EEF-CVE-2026-49755 GHSA-655f-mp8p-96gv CVE-2026-49755 HIGH published 3 days ago • updated 1 day ago

## Summary Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP server...

Multipart form-data header injection in Req via unescaped name/filename/content_type

EEF-CVE-2026-49756 GHSA-px9f-whj3-246m CVE-2026-49756 LOW published 3 days ago • updated 1 day ago

## Summary Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via a...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump req from 0.5.12 to 0.5.14 in the mix group

erlef/beam-openssf-compliance-stats #27

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.12 to 0.5.14

Thunderblok/Thunderline #37

0.5.12 → 0.5.14 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.14

jutonz/homepage #3762

0.5.12 → 0.5.14 Patch PR

Open 11 months ago

Bump req from 0.5.10 to 0.5.14

Beam-Maintenance/wled #3

0.5.10 → 0.5.14 Patch PR

Closed 11 months ago 1 comment

build(deps): bump req from 0.5.8 to 0.5.14

zacky1972/ex_task #46

0.5.8 → 0.5.14 Patch PR

Closed 11 months ago 1 comment

build(deps): bump req from 0.5.12 to 0.5.14

Byzanteam/jet-plugin-sdk #132

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.13 to 0.5.14

swoosh/swoosh #1054

0.5.13 → 0.5.14 Patch PR

Open 11 months ago

build(deps): Bump req from 0.5.13 to 0.5.14

mbta/http_stage #44

0.5.13 → 0.5.14 Patch PR

Open 11 months ago

build(deps): bump req from 0.5.12 to 0.5.14

mbta/mobile_app_backend #336

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.10 to 0.5.14

preciz/common_crawl #6

0.5.10 → 0.5.14 Patch PR

Open 11 months ago

build(deps): bump req from 0.5.12 to 0.5.14

camatcode/ex_ftp #113

0.5.12 → 0.5.14 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.14

hez/brew-dash #495

0.5.12 → 0.5.14 Patch PR

Closed 11 months ago 1 comment

Bump req from 0.5.10 to 0.5.14

mehr-schulferien-de/www.mehr-schulferien.de #751

0.5.10 → 0.5.14 Patch PR

Closed 11 months ago 2 comments

build(deps): bump req from 0.5.12 to 0.5.14

camatcode/aura #85

0.5.12 → 0.5.14 Patch PR

Open 11 months ago 1 comment

Bump req from 0.5.10 to 0.5.14

ug0/aliyun_util #62

0.5.10 → 0.5.14 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.14

eigr-labs/flame-k8s #32

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14

martosaur/instructor_lite #36

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.1 to 0.5.14

honeybadger-io/honeybadger-elixir #636

0.5.1 → 0.5.14 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.14

martosaur/log_hog #19

0.5.12 → 0.5.14 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.14 in /integration_test

aaronrenner/sims #98

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago 1 comment

Bump req from 0.5.12 to 0.5.13

erlef/mix-dependency-submission #147

0.5.12 → 0.5.13 Patch PR

Open 11 months ago

Bump req from 0.5.12 to 0.5.13

swoosh/swoosh #1052

0.5.12 → 0.5.13 Patch PR

Open 11 months ago

build(deps): Bump req from 0.5.10 to 0.5.13

mbta/http_stage #43

0.5.10 → 0.5.13 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.13

erlef/oid_certo #18

0.5.12 → 0.5.13 Patch PR

Open 11 months ago 2 comments

Bump req from 0.5.10 to 0.5.12

ZeusWPI/ZOUT #310

0.5.10 → 0.5.12 Patch PR

Open 11 months ago

chore(deps): Bump req from 0.5.10 to 0.5.12

dwyl/image-classifier #199

0.5.10 → 0.5.12 Patch PR

Merged 11 months ago 1 comment

Bump the production-dependencies group with 5 updates

danielbergholz/techschool.dev #104

0.5.10 → 0.5.12 Patch PR

Merged 11 months ago

deps(deps): bump req from 0.5.11 to 0.5.12

agentjido/jido_action #11

0.5.11 → 0.5.12 Patch PR

Open 12 months ago 2 comments

Bump the deps group with 2 updates

kevinschweikert/live_premier #26

0.5.11 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

Bump req from 0.5.11 to 0.5.12

mtrudel/bandit #504

0.5.11 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.11 to 0.5.12

ndrluis/ex_iceberg #24

0.5.11 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

croesnick/todoist-mcp-server-ex #2

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 2 comments

build(deps): Bump req from 0.5.11 to 0.5.12

dwyl/labels #341

0.5.11 → 0.5.12 Patch PR

Open 12 months ago

Bump req from 0.5.11 to 0.5.12

sgerrand/ex_pdf_shift #8

0.5.11 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

chore(deps): bump req from 0.5.11 to 0.5.12

mrdotb/disco-log #95

0.5.11 → 0.5.12 Patch PR

Open 12 months ago

Bump req from 0.5.10 to 0.5.12

frerich/auto_updater #4

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

deps(deps): bump req from 0.5.10 to 0.5.12

agentjido/jido_ai #43

0.5.10 → 0.5.12 Patch PR

Open 12 months ago 1 comment

build(deps): bump req from 0.5.10 to 0.5.12

mbta/ride_along #195

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

3zcurdia/chroma #59

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

build(deps): Bump req from 0.5.6 to 0.5.12 in /site

jesse-c/rom-to-the-com #18

0.5.6 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

sgerrand/ex_bamboo_hr #27

0.5.10 → 0.5.12 Patch PR

Open 12 months ago

Bump req from 0.5.10 to 0.5.12

LukasW01/db-brm #42

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12 in /lux

Spectral-Finance/lux #293

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12 in the mix group

erlef/beam-openssf-compliance-stats #25

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

chore(deps): bump the production-dependencies group with 10 updates

ash-project/ash_hq #313

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

ug0/aliyun_util #61

0.5.10 → 0.5.12 Patch PR

Open 12 months ago

chore(deps): bump req from 0.5.10 to 0.5.12 in /sdk/elixir in the sdk-elixir group

sipsma/dagger #1067

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 2 comments

Bump req from 0.5.10 to 0.5.12

jutonz/homepage #3740

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.12

preciz/common_crawl #5

0.5.10 → 0.5.12 Patch PR

Closed 12 months ago 1 comment

chore(deps): bump req from 0.5.11 to 0.5.12 in the prod group

lud/aoc #36

0.5.11 → 0.5.12 Patch PR

Merged 12 months ago

Package Details

Name:	`req`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/req`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All hex Advisories

Package Information

Description:

Req is a batteries-included HTTP client for Elixir.

Repository:	https://github.com/wojtekmach/req
Homepage:	https://hexdocs.pm/req/changelog.html
Latest Release:	`0.5.10` about 1 year ago
Dependent Repos:	78
Dependent Packages:	135
Downloads:	6,552,430
Ranking:	Top 1.8218% by dependent repos Top 3.1062% by downloads Top 0.2949% by dependent pkgs

PR Status

Open 88 (44.2%)

Merged 49 (24.6%)

Closed 61 (30.7%)

PR Types

Minor 4 (2.0%)

Patch 194 (97.5%)