CVE-2025-68696
High
Description
httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.
SeverityHigh
CVSS8.2
Exploit probability—
ProductJnunemaker Httparty
PublishedDec 23, 2025
First seenDec 23, 2025
Weakness typeCWE-918Server-side request forgery (SSRF)
How to fix
Update
- jnunemaker httparty0.24.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jnunemaker httparty | v < 0.24.0 | 0.24.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.