Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

omniauth

rubygems · A generalized Rack framework for multiple-provider authentication. · Repository · Package

Security Advisories for omniauth in rubygems

Critical
about 3 years ago

OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value GSA_kwCzR0hTQS1wbTU1LXFmeHItaDI0N84AAuFx

rubygems omniauth
High
over 6 years ago

OmniAuth Ruby gem Cross-site Request Forgery in request phase MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd3NHgtcndxNi1xcGdm

rubygems omniauth
High
over 7 years ago

Omniauth allows POST parameters to be stored in session MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlwcjYtZ3JmNC14MmZy

rubygems omniauth

Filter by Severity

High 2 Critical 1