Vendor
Faraday
Products
3
CVEs
3
Across products
4
Status
Private
Products
3- 2 CVEs
- 1 CVE
- 1 CVE
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-4582 | Hig | 0.48 | 7.3 | 0.01 | May 7, 2024 | A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntp_srv leads to os command injection. It is possible to launch the attack remotely.… | ||
| CVE-2026-54297 | Hig | 0.42 | 7.5 | 0.00 | Jun 24, 2026 | Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decoder in Faraday, decodes nested query strings without… | ||
| CVE-2021-27338 | Med | 0.35 | 5.4 | 0.01 | Jul 20, 2021 | Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter. |
- risk 0.48cvss 7.3epss 0.01
A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntp_srv leads to os command injection. It is possible to launch the attack remotely.…
- risk 0.42cvss 7.5epss 0.00
Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decoder in Faraday, decodes nested query strings without…
- risk 0.35cvss 5.4epss 0.01
Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.