`req`

Ecosystem:
hex

Package URL:
pkg:hex/req

Total PRs:
199 Dependabot PRs

Latest PR:
17 days ago

Unique Repositories:
86 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

EEF-CVE-2026-49755 GHSA-655f-mp8p-96gv CVE-2026-49755 HIGH published 4 days ago • updated about 14 hours ago

## Summary Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP server...

Multipart form-data header injection in Req via unescaped name/filename/content_type

EEF-CVE-2026-49756 GHSA-px9f-whj3-246m CVE-2026-49756 LOW published 4 days ago • updated about 14 hours ago

## Summary Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via a...

Recent PRs (filtered by: Merged , Patch PRs )

RSS Feed Clear filter

Bump req from 0.5.14 to 0.5.15

3zcurdia/chroma #61

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump the mix group with 3 updates

erlef/beam-openssf-compliance-stats #30

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

jutonz/homepage #3774

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

erlef/oid_certo #21

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

ug0/aliyun_util #63

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.15

mtrudel/bandit #507

0.5.12 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.14 to 0.5.15

ExWeb3/elixir_ethers #216

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

build(deps): Bump req from 0.5.14 to 0.5.15

dwyl/labels #346

0.5.14 → 0.5.15 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.12 to 0.5.15

tgrk/ex_oura #26

0.5.12 → 0.5.15 Patch PR

Merged 11 months ago 1 comment

Bump req from 0.5.11 to 0.5.15

sgerrand/ex_pdf_shift #10

0.5.11 → 0.5.15 Patch PR

Merged 11 months ago

Bump req from 0.5.10 to 0.5.14

LukasW01/db-brm #48

0.5.10 → 0.5.14 Patch PR

Merged 11 months ago

deps(deps): bump req from 0.5.12 to 0.5.14

agentjido/jido #54

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago 1 comment

build(deps): Bump req from 0.5.12 to 0.5.14

jesse-c/personal-site #151

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump the non-security group with 2 updates

aj-foster/region-manager #88

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14

ExWeb3/elixir_ethers #214

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

build(deps): Bump req from 0.5.11 to 0.5.14

dwyl/labels #344

0.5.11 → 0.5.14 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.12 to 0.5.14 in /sdk/elixir in the sdk-elixir group

dagger/dagger #10687

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago 3 comments

build(deps): Bump req from 0.5.6 to 0.5.14 in /site

jesse-c/rom-to-the-com #20

0.5.6 → 0.5.14 Patch PR

Merged 11 months ago

chore(deps): bump req from 0.5.12 to 0.5.14 in the prod group

lud/aoc #39

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14 in the mix group

erlef/beam-openssf-compliance-stats #27

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

build(deps): bump req from 0.5.12 to 0.5.14

Byzanteam/jet-plugin-sdk #132

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

build(deps): bump req from 0.5.12 to 0.5.14

mbta/mobile_app_backend #336

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14

eigr-labs/flame-k8s #32

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14

martosaur/instructor_lite #36

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago

Bump req from 0.5.12 to 0.5.14 in /integration_test

aaronrenner/sims #98

0.5.12 → 0.5.14 Patch PR

Merged 11 months ago 1 comment

build(deps): Bump req from 0.5.10 to 0.5.13

mbta/http_stage #43

0.5.10 → 0.5.13 Patch PR

Merged 12 months ago

chore(deps): Bump req from 0.5.10 to 0.5.12

dwyl/image-classifier #199

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago 1 comment

Bump the production-dependencies group with 5 updates

danielbergholz/techschool.dev #104

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.11 to 0.5.12

mtrudel/bandit #504

0.5.11 → 0.5.12 Patch PR

Merged 12 months ago

build(deps): bump req from 0.5.10 to 0.5.12

mbta/ride_along #195

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

3zcurdia/chroma #59

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.12 in the mix group

erlef/beam-openssf-compliance-stats #25

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.12

jutonz/homepage #3740

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

chore(deps): bump req from 0.5.11 to 0.5.12 in the prod group

lud/aoc #36

0.5.11 → 0.5.12 Patch PR

Merged 12 months ago

build(deps): bump req from 0.5.11 to 0.5.12

camatcode/aura #80

0.5.11 → 0.5.12 Patch PR

Merged 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

erlef/mix-dependency-submission #144

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago 1 comment

Bump req from 0.5.10 to 0.5.12

swoosh/swoosh #1051

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

build(deps): bump req from 0.5.10 to 0.5.12

mbta/mobile_app_backend #335

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.12

erlef/oid_certo #16

0.5.10 → 0.5.12 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.11

ambry-app/ambry #1079

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

build(deps): bump req from 0.5.10 to 0.5.11

camatcode/aura #78

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

build(deps): Bump req from 0.5.10 to 0.5.11

jesse-c/personal-site #146

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.11

ndrluis/ex_iceberg #23

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

Bump req from 0.5.10 to 0.5.11

mtrudel/bandit #501

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

Bump the non-security group with 3 updates

aj-foster/region-manager #86

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

build(deps): Bump req from 0.5.10 to 0.5.11

dwyl/labels #339

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

chore(deps): bump req from 0.5.10 to 0.5.11

tgrk/ex_oura #23

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago 1 comment

chore(deps): bump req from 0.5.10 to 0.5.11

mrdotb/disco-log #93

0.5.10 → 0.5.11 Patch PR

Merged 12 months ago

build(deps): bump req from 0.5.8 to 0.5.10

mbta/ride_along #158

0.5.8 → 0.5.10 Patch PR

Merged about 1 year ago 1 comment

Package Details

Name:	`req`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/req`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All hex Advisories

Package Information

Description:

Req is a batteries-included HTTP client for Elixir.

Repository:	https://github.com/wojtekmach/req
Homepage:	https://hexdocs.pm/req/changelog.html
Latest Release:	`0.5.10` about 1 year ago
Dependent Repos:	78
Dependent Packages:	135
Downloads:	6,552,430
Ranking:	Top 1.8218% by dependent repos Top 3.1062% by downloads Top 0.2949% by dependent pkgs

PR Status

Open 88 (44.2%)

Merged 49 (24.6%)

Closed 61 (30.7%)

PR Types

Minor 4 (2.0%)

Patch 194 (97.5%)