Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-68696

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jnunemaker httparty

  • <= 0.23.2affected

References