Vendor/product archive

jnunemaker / httparty CVEs

Beta · best-effort

3 CVEs tagged to jnunemaker / httparty — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jnunemaker vendor archive

CVE-2025-68696

Published Dec 23, 2025

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2024-22049

Published Jan 4, 2024

httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during mul…

CVSS 5.3 · Medium

evidence mentions: 9
Buzz score: 44.0

Public PoC observed

Vendor/product tagsBeta · best-effort

CVE-2013-1801

Published Apr 9, 2013

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute a…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1