req vulnerabilities (Hex)

2 vulnerabilities.

• req Hex Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies CVE-2026-49755 Fix available 8.2 HighJune 8, 2026
• req Hex Multipart form-data header injection in Req via unescaped name/filename/content_type CVE-2026-49756 Fix available 2.1 LowJune 8, 2026