Skip to content
OpenAdvisories
Medium DLA-3716-1 1 CVE

ruby-httparty - security update

Published Jan 23, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ruby-httparty 0.16.2+dfsg1-3+deb10u1

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-22049

    httparty Multipart/Form-Data Request Tampering Vulnerability

    httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames bei…

    httparty ruby-httparty ruby-httparty Debian Ubuntu RubyGems