Skip to content
OpenAdvisories

Package · Hex

req

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-49755

    Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb response bodies. Req's default response pipeline includes Req.Ste…

    wojtekmach req req Hex