Vulnerable Library - httparty-0.22.0.gem
Makes http fun! Also, makes consuming restful web services dead easy.
Library home page: https://rubygems.org/gems/httparty-0.22.0.gem
Path to dependency file: /Gemfile.lock
Path to vulnerable library: /tmp/containerbase/cache/.ruby/cache/httparty-0.22.0.gem
Found in HEAD commit: 820e7bde0ba0cb6a74e83573f2f3e1ebd5262d35
Vulnerabilities
| Vulnerability |
Severity |
 CVSS |
Exploit Maturity |
EPSS |
Dependency |
Type |
Fixed in (httparty version) |
Remediation Possible** |
Reachability |
| CVE-2025-68696 |
 High |
8.2 |
Not Defined |
0.1% |
httparty-0.22.0.gem |
Direct |
httparty - 0.24.0 |
❌ |
|
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2025-68696
Vulnerable Library - httparty-0.22.0.gem
Makes http fun! Also, makes consuming restful web services dead easy.
Library home page: https://rubygems.org/gems/httparty-0.22.0.gem
Path to dependency file: /Gemfile.lock
Path to vulnerable library: /tmp/containerbase/cache/.ruby/cache/httparty-0.22.0.gem
Dependency Hierarchy:
- ❌ httparty-0.22.0.gem (Vulnerable Library)
Found in HEAD commit: 820e7bde0ba0cb6a74e83573f2f3e1ebd5262d35
Found in base branch: master
Vulnerability Details
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.
Publish Date: 2025-12-23
URL: CVE-2025-68696
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.1%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-hm5p-x4rq-38w4
Release Date: 2025-12-23
Fix Resolution: httparty - 0.24.0
Makes http fun! Also, makes consuming restful web services dead easy.
Library home page: https://rubygems.org/gems/httparty-0.22.0.gem
Path to dependency file: /Gemfile.lock
Path to vulnerable library: /tmp/containerbase/cache/.ruby/cache/httparty-0.22.0.gem
Found in HEAD commit: 820e7bde0ba0cb6a74e83573f2f3e1ebd5262d35
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
Vulnerable Library - httparty-0.22.0.gem
Makes http fun! Also, makes consuming restful web services dead easy.
Library home page: https://rubygems.org/gems/httparty-0.22.0.gem
Path to dependency file: /Gemfile.lock
Path to vulnerable library: /tmp/containerbase/cache/.ruby/cache/httparty-0.22.0.gem
Dependency Hierarchy:
Found in HEAD commit: 820e7bde0ba0cb6a74e83573f2f3e1ebd5262d35
Found in base branch: master
Vulnerability Details
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.
Publish Date: 2025-12-23
URL: CVE-2025-68696
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.1%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-hm5p-x4rq-38w4
Release Date: 2025-12-23
Fix Resolution: httparty - 0.24.0