req vulnerabilities

1 known vulnerability in req from Wojtekmach. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  req: Improper Handling of Highly Compressed Data (Data Amplification)

  CVE-2026-49755Jun 8, 2026Wojtekmach

  Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb response bodies. Req's default response pipeline includes Req.Step