— Hex
EEF-CVE-2026-49755 · CVE-2026-49755, GHSA-655f-mp8p-96gv Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies
Modified: 6/8/2026
package
Hex / req
pkg:hex/req
— Hex
EEF-CVE-2026-49756 · CVE-2026-49756, GHSA-px9f-whj3-246m Multipart form-data header injection in Req via unescaped name/filename/content_type
Modified: 6/8/2026