{"action":"Upgrade httparty to 0.24.0 or later.","affected":[{"fixed":"0.24.0","introduced":"0"}],"component":"httparty","cve_ids":["CVE-2025-68696"],"ecosystem":"RubyGems","epss":0.00302,"exploited":false,"fixed_versions":["0.24.0"],"ghsa_id":"GHSA-hm5p-x4rq-38w4","id":"tcs_01M5KEKN1TFYQH8TJD3X4PP9TN","modified_at":"2026-09-10T03:50:31.906557910Z","published_at":"2025-12-23T19:31:10Z","references":["https://osv.dev/vulnerability/GHSA-hm5p-x4rq-38w4","https://github.com/jnunemaker/httparty/security/advisories/GHSA-hm5p-x4rq-38w4","https://nvd.nist.gov/vuln/detail/CVE-2025-68696","https://github.com/jnunemaker/httparty/commit/0529bcd6309c9fd9bfdd50ae211843b10054c240","https://github.com/jnunemaker/httparty","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/httparty/CVE-2025-68696.yml"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-hm5p-x4rq-38w4","url":"https://osv.dev/vulnerability/GHSA-hm5p-x4rq-38w4"}],"summary":"httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage"}