CVE-2025-68696
1 advisory.
RubyGems/httparty CVE-2025-68696: high 8.2, EPSS 0.30%
httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage
Action: Upgrade httparty to 0.24.0 or later.
bundle update httpartyAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.24.0 | - |
Fixed versions
| 0.24.0 |
Sources
- osv: GHSA-hm5p-x4rq-38w4
- https://github.com/jnunemaker/httparty/security/advisories/GHSA-hm5p-x4rq-38w4
- https://nvd.nist.gov/vuln/detail/CVE-2025-68696
- https://github.com/jnunemaker/httparty/commit/0529bcd6309c9fd9bfdd50ae211843b10054c240
- https://github.com/jnunemaker/httparty
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/httparty/CVE-2025-68696.yml
CVE-2025-68696 · published · modified · JSON