Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/ruby-httparty@0.21.0-1
purl pkg:deb/debian/ruby-httparty@0.21.0-1
Next non-vulnerable version 0.24.2-2
Latest non-vulnerable version 0.24.2-2
Risk 4.2
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-qct7-1myn-3qbt
Aliases:
CVE-2025-68696
GHSA-hm5p-x4rq-38w4
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.
0.24.2-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6c1q-hsp4-mudk httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written. CVE-2024-22049
GHSA-5pq7-52mg-hr42
GMS-2023-1

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T02:54:22.891999+00:00 Debian Oval Importer Fixing VCID-6c1q-hsp4-mudk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T01:05:05.481523+00:00 Debian Importer Affected by VCID-qct7-1myn-3qbt https://security-tracker.debian.org/tracker/data/json 38.6.0