Jnunemaker Httparty
3 CVEs affecting Jnunemaker Httparty. Latest disclosed: 2025-12-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68696 | High | 8.2 | 2025-12-23 | httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow th… |
CVE-2024-22049 | Medium | 5.3 | 2024-01-04 | httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename… |
CVE-2013-1801 | | 2013-04-09 | The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection a… |