Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-22049

httparty Multipart/Form-Data Request Tampering Vulnerability

httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Jnunemaker and 1 more
Products
Debian Linux Fedora Httparty and 1 more
CVE-2025-68696

httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

CVSS 4.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jnunemaker John Nunemaker
Products
Httparty Httparty