Vulnerabilities

TI-2025-42167 CVE-2025-68696 · GHSA-hm5p-x4rq-38w4

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

HIGH 73

httparty is an API tool.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00302 Published 2025-12-23 Fixed in 0.24.0 CWE-918

TI-2024-14667 CVE-2024-22049 · GHSA-5pq7-52mg-hr42

httparty Multipart/Form-Data Request Tampering Vulnerability

MEDIUM 63

httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0129 Published 2024-01-04 Fixed in 0.21.0 CWE-472

TI-2013-01587 CVE-2013-1801 · GHSA-mgx3-27hr-mfgp

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string…

MEDIUM 40

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of servi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0441 Published 2013-04-09 Fixed in 0.10.0 CWE-264

Vulnerabilities

Filters

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

httparty Multipart/Form-Data Request Tampering Vulnerability

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string…