jnunemaker

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

jnunemaker records in CISA KEV

No jnunemaker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Httparty 3 records HIGH

Records

3 records

TI-2025-42167 CVE-2025-68696 · GHSA-hm5p-x4rq-38w4

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

HIGH 73

httparty is an API tool.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00302 Published 2025-12-23 Fixed in 0.24.0 CWE-918

TI-2024-14667 CVE-2024-22049 · GHSA-5pq7-52mg-hr42

httparty Multipart/Form-Data Request Tampering Vulnerability

MEDIUM 63

httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0129 Published 2024-01-04 Fixed in 0.21.0 CWE-472

TI-2013-01587 CVE-2013-1801 · GHSA-mgx3-27hr-mfgp

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string…

MEDIUM 40

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of servi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0441 Published 2013-04-09 Fixed in 0.10.0 CWE-264

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0