`faraday`

Ecosystem:
rubygems

Package URL:
pkg:gem/faraday

Total PRs:
1,544 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
697 repositories

Unique Repos (30 days):
23 repositories

Security Advisories

Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping

GHSA-5rv5-xj5j-3484 CVE-2026-33637 LOW published 14 days ago • updated 7 days ago

## Summary `Faraday::Connection#build_exclusive_url` still allows protocol-relative host override when the request target is provided as a `URI` o...

Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url

GHSA-33mh-2634-fwr2 CVE-2026-25765 MODERATE published 4 months ago • updated 14 days ago

### Impact Faraday's `build_exclusive_url` method (in `lib/faraday/connection.rb`) uses Ruby's `URI#merge` to combine the connection's base UR...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the bundler group across 1 directory with 3 updates

carlowahlstedt/carlowahlstedt.github.io #22

2.14.1 → 2.14.2 Patch PR

Open 6 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

yeti-switch/yeti-web #2006

2.14.1 → 2.14.2 Patch PR

Closed 9 days ago 1 comment

chore(deps): bump faraday from 2.14.1 to 2.14.2

hackclub/stardance #88

2.14.1 → 2.14.2 Patch PR

Open 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2 in /docs

Leaflet/Leaflet #10219

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 2 comments

Bump faraday from 2.14.1 to 2.14.2

saemu/saemu.github.io #40

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

dpla/dashboard-analytics #315

2.14.1 → 2.14.2 Patch PR

Open 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

coreinfrastructure/best-practices-badge #2810

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

vestris/slack-invite #72

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

dblock/slack-sup2 #126

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

dblock/slack-sup #182

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

chore(deps-dev): bump faraday from 2.14.1 to 2.14.2 in /docs

ImperialCollegeLondon/FLT #965

2.14.1 → 2.14.2 Patch PR

Closed 14 days ago 1 comment

Bump the production-dependencies group with 3 updates

etalab/formulaire-qf #340

2.14.1 → 2.14.2 Patch PR

Closed 15 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

bitidev/jamesebentier.com #1050

2.14.1 → 2.14.2 Patch PR

Closed 15 days ago 1 comment

Bump faraday from 2.14.1 to 2.14.2

DFE-Digital/register-trainee-teachers #6158

2.14.1 → 2.14.2 Patch PR

Open 17 days ago 3 comments

Bump faraday from 2.14.1 to 2.14.2

somleng/somleng #2610

2.14.1 → 2.14.2 Patch PR

Closed 17 days ago 1 comment

Bump the bundler group across 3 directories with 3 updates

YoutacRandS-VA/firebase-ios-sdk #4

1.10.0 → 1.10.5 Patch PR

Open 2 months ago 1 comment

chore(deps): Bump the bundler group across 1 directory with 3 updates

Sakzz1994/metamask-mobile #3

1.10.4 → 1.10.5 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the bundler group across 5 directories with 4 updates

c6ai/react-native-examples #4

1.10.3 → 1.10.5 Patch PR

Closed 2 months ago 1 comment

chore(deps): Bump the bundler group across 1 directory with 3 updates

Didin2001/metamask-mobile #2

1.10.4 → 1.10.5 Patch PR

Open 2 months ago 1 comment

Bump the bundler group across 3 directories with 3 updates

SherfeyInv/Catchcrooks #7

1.10.3 → 1.10.5 Patch PR

Open 2 months ago 1 comment

Bump the dependencies group across 1 directory with 10 updates

code4lib/job_board #104

2.14.0 → 2.14.1 Patch PR

Closed 3 months ago 1 comment

Bump faraday from 1.10.0 to 1.10.5

Dustin4444/no_color #2

1.10.0 → 1.10.5 Patch PR

Open 3 months ago 1 comment

Bump faraday from 1.10.0 to 1.10.5

ptsinganos/ptsinganos.github.io #22

1.10.0 → 1.10.5 Patch PR

Closed 3 months ago 1 comment

Bump faraday from 2.14.0 to 2.14.1

stevens101/nucore-open #819

2.14.0 → 2.14.1 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the bundler group across 2 directories with 3 updates

MTES-MCT/mon-devis-sans-oublis-backend #505

2.14.0 → 2.14.1 Patch PR

Open 3 months ago 1 comment

Bump the bundler group across 1 directory with 3 updates

keypup-io/cloudtasker #168

2.14.0 → 2.14.1 Patch PR

Open 3 months ago 1 comment

Bump faraday from 1.10.3 to 1.10.5 in /packages/reown_walletkit/example/ios

reown-com/reown_flutter #354

1.10.3 → 1.10.5 Patch PR

Closed 3 months ago 3 comments

build(deps): Bump the bundler group across 1 directory with 2 updates

feather-page/cms #353

2.14.0 → 2.14.1 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the patch_updates group across 1 directory with 4 updates

mmenanno/lunchmoney #475

2.14.0 → 2.14.1 Patch PR

Closed 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5 in /samples/round_info

dblock/slack-sup2 #85

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 2 comments

Bump faraday from 1.10.4 to 1.10.5 in /IsraelHiking.Web/ios/App

IsraelHikingMap/Site #2367

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 2 comments

Bump faraday from 2.14.0 to 2.14.1 in the bundler group across 1 directory

AKJUS/mastodon #33

2.14.0 → 2.14.1 Patch PR

Open 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

bdwyertech/docker-tfkit #478

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5 in the bundler group across 1 directory

GlacierEQ/ish #1

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the bundler group across 2 directories with 1 update

getmydia/mydia #72

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

lukifer23/Breakout- #3

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

AvdLee/Diagnostics #199

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump faraday from 1.10.4 to 1.10.5

otixo-inc/jitsi-meet #82

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 2 comments

Bump faraday from 1.10.4 to 1.10.5

openSUSE/landing-page #319

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 2 comments

Bump faraday from 1.10.4 to 1.10.5

ruby-no-kai/sponsor-app #113

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5 in /fastlane

mattermost/mattermost-mobile #9509

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 8 comments

Bump faraday from 1.10.4 to 1.10.5

Fate-Grand-Automata/FGA #2181

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

infertux/chef-bitcoin #30

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

CatimaLoyalty/Android #3022

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 2 comments

build(deps): bump faraday from 1.10.4 to 1.10.5

rubyforgood/casa #6711

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump faraday from 1.10.4 to 1.10.5

cyfronet-fid/marketplace #3614

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

Alberto97/OUILookup #553

1.10.4 → 1.10.5 Patch PR

Closed 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5

Automattic/pocket-casts-ios #3940

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 1 comment

Bump faraday from 1.10.4 to 1.10.5 in /iosHyperskillApp

hyperskill/mobile-app #1285

1.10.4 → 1.10.5 Patch PR

Open 4 months ago 2 comments

Bump faraday from 1.10.3 to 1.10.5

webmasterproT/expo #6

1.10.3 → 1.10.5 Patch PR

Open 4 months ago 1 comment

Package Details

Name:	`faraday`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/faraday`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 1

LOW 1

View All gem Advisories

Package Information

Description:

HTTP/REST API client library.

Repository:	https://github.com/lostisland/faraday
Homepage:	https://lostisland.github.io/faraday
Latest Release:	`2.13.1` about 1 year ago
Dependent Repos:	484,789
Dependent Packages:	5,199
Downloads:	975,113,908
Ranking:	Top 0.034% by dependent repos Top 0.0112% by downloads Top 0.01% by dependent pkgs

PR Status

Open 691 (44.8%)

Merged 224 (14.5%)

Closed 606 (39.2%)

PR Types

Major 31 (2.0%)

Minor 672 (43.5%)

Patch 814 (52.7%)