VulnerableCode Package Details - pkg:gem/httparty@0.10.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-6c1q-hsp4-mudk Aliases: CVE-2024-22049 GHSA-5pq7-52mg-hr42 GMS-2023-1	httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written.	0.21.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-6y9u-2wrn-ekcb Aliases: GHSA-g47j-3m2m-74qv	Duplicate Advisory: httparty has multipart/form-data request tampering vulnerability	0.21.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-qct7-1myn-3qbt Aliases: CVE-2025-68696 GHSA-hm5p-x4rq-38w4	httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.	0.24.0 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-6c1q-hsp4-mudk
Aliases:
CVE-2024-22049
GHSA-5pq7-52mg-hr42
GMS-2023-1

httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written.

0.21.0
Affected by 1 other vulnerability.

VCID-6y9u-2wrn-ekcb
Aliases:
GHSA-g47j-3m2m-74qv

Duplicate Advisory: httparty has multipart/form-data request tampering vulnerability

0.21.0
Affected by 1 other vulnerability.

VCID-qct7-1myn-3qbt
Aliases:
CVE-2025-68696
GHSA-hm5p-x4rq-38w4

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

0.24.0
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-4bg9-1wwd-2yhm	HTTParty does not restrict casts of string values	CVE-2013-1801 GHSA-mgx3-27hr-mfgp OSV-90741

Vulnerability

Summary

Aliases

VCID-4bg9-1wwd-2yhm

HTTParty does not restrict casts of string values

CVE-2013-1801
GHSA-mgx3-27hr-mfgp
OSV-90741

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-13T09:26:59.504246+00:00	Ruby Importer	Affected by	VCID-qct7-1myn-3qbt	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/httparty/CVE-2025-68696.yml	38.6.0
2026-06-13T09:22:44.181602+00:00	Ruby Importer	Affected by	VCID-6c1q-hsp4-mudk	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/httparty/CVE-2024-22049.yml	38.6.0
2026-06-13T09:17:18.217465+00:00	Ruby Importer	Fixing	VCID-4bg9-1wwd-2yhm	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/httparty/CVE-2013-1801.yml	38.6.0
2026-06-12T20:42:05.454946+00:00	GitLab Importer	Affected by	VCID-qct7-1myn-3qbt	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/httparty/CVE-2025-68696.yml	38.6.0
2026-06-12T19:16:02.849863+00:00	GitLab Importer	Affected by	VCID-6y9u-2wrn-ekcb	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/httparty/GHSA-g47j-3m2m-74qv.yml	38.6.0
2026-06-12T15:38:59.924574+00:00	GitLab Importer	Fixing	VCID-4bg9-1wwd-2yhm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/httparty/CVE-2013-1801.yml	38.6.0
2026-06-12T07:52:16.270404+00:00	GithubOSV Importer	Fixing	VCID-4bg9-1wwd-2yhm	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-mgx3-27hr-mfgp/GHSA-mgx3-27hr-mfgp.json	38.6.0
2026-06-11T20:23:51.229513+00:00	GHSA Importer	Fixing	VCID-4bg9-1wwd-2yhm	https://github.com/advisories/GHSA-mgx3-27hr-mfgp	38.6.0