Skip to content
OpenAdvisories

Package · Ubuntu

ruby-httparty

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2025-68696

    httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

    httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

    jnunemaker httparty httparty ruby-httparty Debian Ubuntu RubyGems
  • Medium 5.3
    CVE-2024-22049

    httparty Multipart/Form-Data Request Tampering Vulnerability

    httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames bei…

    httparty ruby-httparty ruby-httparty Debian Ubuntu RubyGems