Skip to content
OpenAdvisories
Medium DLA-3900-1 1 CVE

ruby-httparty - security update

Published Sep 28, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 ruby-httparty 0.18.1-2+deb11u1

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-22049

    httparty Multipart/Form-Data Request Tampering Vulnerability

    httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames bei…

    httparty ruby-httparty ruby-httparty Debian Ubuntu RubyGems