CVE-2025-68696

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68696
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68696.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68696
Aliases
Downstream
Related
Published
2025-12-23T22:59:04.201Z
Modified
2026-02-04T03:38:34.013124Z
Severity
  • 7.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage
Details

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68696.json",
    "cwe_ids": [
        "CWE-918"
    ]
}
References

Affected packages

Git / github.com/jnunemaker/httparty

Affected ranges

Type
GIT
Repo
https://github.com/jnunemaker/httparty
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0529bcd6309c9fd9bfdd50ae211843b10054c240

Affected versions

Other
v0
v0.*
v0.10.0
v0.10.1
v0.10.2
v0.11.0
v0.12.0
v0.13.0
v0.13.1
v0.13.2
v0.13.3
v0.13.4
v0.13.5
v0.13.6
v0.13.7
v0.14.0
v0.15.0
v0.15.1
v0.15.2
v0.15.3
v0.15.4
v0.15.5
v0.15.6
v0.15.7
v0.16.0
v0.16.1
v0.16.2
v0.16.4
v0.17.0
v0.17.1
v0.17.2
v0.17.3
v0.18.0
v0.18.1
v0.19.0
v0.19.1
v0.20.0
v0.21.0
v0.22.0
v0.23.0
v0.23.1
v0.23.2
v0.4.5
v0.5.0
v0.5.1
v0.5.2
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.7.4
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68696.json"