Search for packages
| purl | pkg:gem/httparty@0.8.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4bg9-1wwd-2yhm
Aliases: CVE-2013-1801 GHSA-mgx3-27hr-mfgp OSV-90741 |
HTTParty does not restrict casts of string values |
Affected by 3 other vulnerabilities. |
|
VCID-6c1q-hsp4-mudk
Aliases: CVE-2024-22049 GHSA-5pq7-52mg-hr42 GMS-2023-1 |
httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written. |
Affected by 1 other vulnerability. |
|
VCID-6y9u-2wrn-ekcb
Aliases: GHSA-g47j-3m2m-74qv |
Duplicate Advisory: httparty has multipart/form-data request tampering vulnerability |
Affected by 1 other vulnerability. |
|
VCID-qct7-1myn-3qbt
Aliases: CVE-2025-68696 GHSA-hm5p-x4rq-38w4 |
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||