A vulnerability labeled as problematic has been found in lostisland faraday up to 1.10.5/2.14.2. The impacted element is the function Faraday::NestedParamsEncoder of the component Common Interface. Such manipulation leads to uncontrolled recursion.

This vulnerability is uniquely identified as CVE-2026-54297. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.