Search for packages
| purl | pkg:deb/debian/ruby-httparty@0.18.1-2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6c1q-hsp4-mudk
Aliases: CVE-2024-22049 GHSA-5pq7-52mg-hr42 GMS-2023-1 |
httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written. |
Affected by 1 other vulnerability. |
|
VCID-qct7-1myn-3qbt
Aliases: CVE-2025-68696 GHSA-hm5p-x4rq-38w4 |
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-13T02:54:22.887665+00:00 | Debian Oval Importer | Affected by | VCID-6c1q-hsp4-mudk | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.6.0 |
| 2026-06-13T01:05:05.476813+00:00 | Debian Importer | Affected by | VCID-qct7-1myn-3qbt | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |