From a8eb753b250fec600cc9d11c5c1004fb220c5ed9 Mon Sep 17 00:00:00 2001
From: Martijn Versluis <martijnversluis@users.noreply.github.com>
Date: Thu, 16 Jul 2026 09:01:46 +0200
Subject: [PATCH] Patch faraday NestedParamsEncoder recursion DoS advisory
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps 2.14.2 → 2.14.3. Addresses:
- GHSA uncontrolled recursion in NestedParamsEncoder allows
  stack exhaustion DoS via deeply nested query parameters
---
 Gemfile.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 70c9892..3363b8d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -36,7 +36,7 @@ GEM
       rexml
     diff-lcs (1.5.1)
     drb (2.2.3)
-    faraday (2.14.2)
+    faraday (2.14.3)
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger