`faraday`

Ecosystem:
rubygems

Package URL:
pkg:gem/faraday

Total PRs:
1,544 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
697 repositories

Unique Repos (30 days):
23 repositories

Security Advisories

Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping

GHSA-5rv5-xj5j-3484 CVE-2026-33637 LOW published 13 days ago • updated 6 days ago

## Summary `Faraday::Connection#build_exclusive_url` still allows protocol-relative host override when the request target is provided as a `URI` o...

Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url

GHSA-33mh-2634-fwr2 CVE-2026-25765 MODERATE published 4 months ago • updated 13 days ago

### Impact Faraday's `build_exclusive_url` method (in `lib/faraday/connection.rb`) uses Ruby's `URI#merge` to combine the connection's base UR...

Recent PRs

RSS Feed

Bump the bundler group across 1 directory with 3 updates

carlowahlstedt/carlowahlstedt.github.io #22

2.14.1 → 2.14.2 Patch PR

Open 5 days ago 1 comment

Bump the bundler group across 1 directory with 3 updates

AKJUS/omnibus-gitlab #567

2.8.1 → 2.14.2 Minor PR

Open 8 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

yeti-switch/yeti-web #2006

2.14.1 → 2.14.2 Patch PR

Closed 8 days ago 1 comment

Bump faraday from 2.7.10 to 2.14.2

pmassana/pmassana.github.io #25

2.7.10 → 2.14.2 Minor PR

Closed 9 days ago 2 comments

chore(deps): bump faraday from 2.14.1 to 2.14.2

hackclub/stardance #88

2.14.1 → 2.14.2 Patch PR

Open 13 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2 in /docs

Leaflet/Leaflet #10219

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 2 comments

Bump faraday from 2.14.1 to 2.14.2

saemu/saemu.github.io #40

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

dpla/dashboard-analytics #315

2.14.1 → 2.14.2 Patch PR

Open 13 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

coreinfrastructure/best-practices-badge #2810

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

vestris/slack-invite #72

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

dblock/slack-sup2 #126

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

dblock/slack-sup #182

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 1 comment

chore(deps-dev): bump faraday from 2.14.1 to 2.14.2 in /docs

ImperialCollegeLondon/FLT #965

2.14.1 → 2.14.2 Patch PR

Closed 13 days ago 1 comment

Bump faraday from 2.13.2 to 2.14.2

yegor256/telepost #165

2.13.2 → 2.14.2 Minor PR

Closed 13 days ago 1 comment

Bump faraday from 2.12.0 to 2.14.2

shamshadM/shamshadm.github.io #15

2.12.0 → 2.14.2 Minor PR

Closed 13 days ago 1 comment

Bump the production-dependencies group with 3 updates

etalab/formulaire-qf #340

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

bitidev/jamesebentier.com #1050

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

DFE-Digital/register-trainee-teachers #6158

2.14.1 → 2.14.2 Patch PR

Open 16 days ago 3 comments

Bump faraday from 2.14.1 to 2.14.2

somleng/somleng #2610

2.14.1 → 2.14.2 Patch PR

Closed 16 days ago 1 comment

Bump the bundler group across 1 directory with 6 updates

AKJUS/maptimedavis.github.io #37

2.7.10 → 2.14.1 Minor PR

Open 23 days ago 1 comment

Bump the bundler group across 1 directory with 16 updates

EthanThePhoenix38/openproject #8

2.13.4 → 2.14.1 Minor PR

Closed 23 days ago 1 comment

Bump the bundler group across 1 directory with 17 updates

LelandParker/openproject #11

2.12.2 → 2.14.1 Minor PR

Closed 23 days ago 1 comment

build(deps-dev): bump the bundler group across 1 directory with 4 updates

Kaurin/kaurin.github.io #30

2.13.4 → 2.14.1 Minor PR

Closed 29 days ago 1 comment

Bump the bundler group across 1 directory with 4 updates

D3strukt0r/d3strukt0r.github.io #9

1.0.1 → 1.10.5 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the dependencies group with 11 updates

aquahubtest36/explore #8

2.13.4 → 2.14.1 Minor PR

Open about 2 months ago 1 comment

Bump the bundler group across 1 directory with 4 updates

Trancendos/dependabot-core #8

2.7.11 → 2.14.1 Minor PR

Open about 2 months ago 3 comments

Bump the bundler group across 1 directory with 6 updates

Lynquatiq/entitlements-github-plugin #4

2.12.1 → 2.14.1 Minor PR

Closed about 2 months ago 1 comment

build(deps): bump the bundler group across 10 directories with 10 updates

danwdart/nixpkgs #27

1.7.0 → 1.10.5 Minor PR

Closed about 2 months ago 1 comment

Bump the bundler group across 1 directory with 5 updates

Lynquatiq/entitlements-github-plugin #3

2.12.1 → 2.14.1 Minor PR

Closed about 2 months ago 1 comment

Bump faraday from 1.0.0 to 1.10.5

0hmdz/bundler-cred-test #8

1.0.0 → 1.10.5 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump faraday from 2.13.4 to 2.14.1

S0vryn9-C011ect1ve/3mpwrapp.github.io #42

2.13.4 → 2.14.1 Minor PR

Open 2 months ago 4 comments

Bump the all group in /site with 35 updates

plule/vox-uristi #340

2.7.6 → 2.14.1 Minor PR

Closed 2 months ago 1 comment

Bump the bundler group across 16 directories with 5 updates

vitolothomas1986/gitlabhq #8

2.12.2 → 2.14.1 Minor PR

Closed 2 months ago 1 comment

Bump the bundler group across 3 directories with 3 updates

YoutacRandS-VA/firebase-ios-sdk #4

1.10.0 → 1.10.5 Patch PR

Open 2 months ago 1 comment

chore(deps): Bump the bundler group across 1 directory with 3 updates

Sakzz1994/metamask-mobile #3

1.10.4 → 1.10.5 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the bundler group across 5 directories with 4 updates

c6ai/react-native-examples #4

1.10.3 → 1.10.5 Patch PR

Closed 2 months ago 1 comment

chore(deps): Bump the bundler group across 1 directory with 3 updates

Didin2001/metamask-mobile #2

1.10.4 → 1.10.5 Patch PR

Open 2 months ago 1 comment

Bump the bundler group across 3 directories with 3 updates

SherfeyInv/Catchcrooks #7

1.10.3 → 1.10.5 Patch PR

Open 2 months ago 1 comment

Bump the bundler group across 1 directory with 6 updates

pboling/view_component #3

1.3.0 → 1.10.5 Minor PR

Closed 2 months ago 1 comment

Bump the bundler group across 1 directory with 2 updates

zbyteprog/dependabot-core #15

2.7.11 → 2.14.1 Minor PR

Closed 2 months ago 1 comment

Bump faraday from 2.13.4 to 2.14.1

MMAILAB-NTNUEE/MMAILAB-NTNUEE.github.io #27

2.13.4 → 2.14.1 Minor PR

Closed 3 months ago 1 comment

Bump the bundler group across 1 directory with 4 updates

orest2027/communityc223 #2

2.12.1 → 2.14.1 Minor PR

Closed 3 months ago 1 comment

Bump the dependencies group across 1 directory with 10 updates

code4lib/job_board #104

2.14.0 → 2.14.1 Patch PR

Closed 3 months ago 1 comment

Bump faraday from 2.7.4 to 2.14.1

Dustin4444/EIPs #6

2.7.4 → 2.14.1 Minor PR

Open 3 months ago 1 comment

Bump faraday from 1.10.0 to 1.10.5

Dustin4444/no_color #2

1.10.0 → 1.10.5 Patch PR

Open 3 months ago 1 comment

Bump faraday from 2.9.0 to 2.14.1

Dustin4444/community #5

2.9.0 → 2.14.1 Minor PR

Open 3 months ago 2 comments

Bump faraday from 2.13.4 to 2.14.1

byron123t/byron123t.github.io #1

2.13.4 → 2.14.1 Minor PR

Closed 3 months ago 1 comment

Bump the prod-dependencies group across 2 directories with 13 updates

Familyfirst4/dependabot-core #783

2.7.11 → 2.14.1 Minor PR

Closed 3 months ago 1 comment

Bump the bundler group across 1 directory with 4 updates

aheusingfeld/aheusingfeld.github.io #37

2.12.1 → 2.14.1 Minor PR

Closed 3 months ago 1 comment

Bump faraday from 1.10.0 to 1.10.5

ptsinganos/ptsinganos.github.io #22

1.10.0 → 1.10.5 Patch PR

Closed 3 months ago 1 comment

Package Details

Name:	`faraday`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/faraday`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 1

LOW 1

View All gem Advisories

Package Information

Description:

HTTP/REST API client library.

Repository:	https://github.com/lostisland/faraday
Homepage:	https://lostisland.github.io/faraday
Latest Release:	`2.13.1` about 1 year ago
Dependent Repos:	484,789
Dependent Packages:	5,199
Downloads:	975,113,908
Ranking:	Top 0.034% by dependent repos Top 0.0112% by downloads Top 0.01% by dependent pkgs

PR Status

Open 691 (44.8%)

Merged 224 (14.5%)

Closed 606 (39.2%)

PR Types

Major 31 (2.0%)

Minor 672 (43.5%)

Patch 814 (52.7%)