Skip to content
OpenAdvisories

Package · RubyGems

httparty

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.8
    CVE-2025-68696

    httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

    httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

    jnunemaker httparty httparty ruby-httparty Debian Ubuntu RubyGems
  • Medium 5.3
    CVE-2024-22049

    httparty Multipart/Form-Data Request Tampering Vulnerability

    httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames bei…

    httparty ruby-httparty ruby-httparty Debian Ubuntu RubyGems
  • High —
    CVE-2013-1801

    HTTParty does not restrict casts of string values

    The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leve…

    httparty RubyGems