QwikSec

Security Database

CVE

CWE

Training

CVE-2025-68696

Published: Dec 23, 2025

Modified: Dec 24, 2025

PUBLISHED

Description

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

Vendor	Product	Versions
jnunemaker	httparty	affected `<= 0.23.2`

Weaknesses (CWE)

References

https://github.com/jnunemaker/httparty/security/advisories/GHSA-hm5p-x4rq-38w4

x_refsource_CONFIRM

https://github.com/jnunemaker/httparty/commit/0529bcd6309c9fd9bfdd50ae211843b10054c240

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.