CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2025-68696

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

Score
7.8 high
Published
2025-12-23
Links
NVD · cve.org

Matched ports (1)

PortPackageVersionStatusMaintainer
www/rubygem-httparty021rubygem-httparty0210.21.0unaddressedsunpoet@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>rubygem-httparty021</name>
	<range><lt>0.24.0</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>httparty is an API tool. In versions 0.23.2 and prior, httparty is
	vulnerable to SSRF. This issue can pose a risk of leaking API keys,
	and it can also allow third parties to issue requests to internal
	servers. This issue has been patched via commit 0529bcd.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-68696</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-68696</url>
    </references>
    <dates>
      <discovery>2025-12-23</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>