[GHSA-98m9-hrrm-r99r] Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

[iBotPeaches]

Updates

• Affected products

Comments
v1 got a new patch as well - https://github.com/lostisland/faraday/releases/tag/v1.10.6

[github]

Hi there @iMacTia! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

Pull request overview

Updates the OSV advisory for GHSA-98m9-hrrm-r99r (Faraday NestedParamsEncoder recursion DoS) to reflect additional affected product/version information for the Faraday 1.x line.

Changes:

• Adds a second affected entry to capture the Faraday v1 fix version (fixed: 1.10.6).
• Updates the advisory modified timestamp.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.