req
0.7.2
Req is a batteries-included HTTP client for Elixir.
Current section
2 Advisories
Jump to
Current section
2 Advisories
Multipart form-data header injection in Req via unescaped name/filename/content_type
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-49756.html
- https://github.com/wojtekmach/req
- https://github.com/wojtekmach/req/commit/74506ff2c5addf74df85d79dc726e9b2e264a8ba
- https://github.com/wojtekmach/req/releases/tag/v0.6.0
- https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m
- https://hex.pm/packages/req
- https://nvd.nist.gov/vuln/detail/CVE-2026-49756
- https://osv.dev/vulnerability/EEF-CVE-2026-49756
Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-49755.html
- https://github.com/wojtekmach/req
- https://github.com/wojtekmach/req/commit/84977e5b1a83f26e749d55ad06e3625464af4e8d
- https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv
- https://hex.pm/packages/req
- https://nvd.nist.gov/vuln/detail/CVE-2026-49755
- https://osv.dev/vulnerability/EEF-CVE-2026-49755
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
81 288
yesterday
44 371
last 7 days
266 452
all time
15 142 914