omniauth Security Advisories - Rubygems | Ecosyste.ms: Advisories

omniauth

A generalized Rack framework for multiple-provider authentication.

View on github.com · View on rubygems.org

Security Advisories for omniauth in rubygems

Critical

about 3 years ago

OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value GSA_kwCzR0hTQS1wbTU1LXFmeHItaDI0N84AAuFx

rubygems omniauth

High

over 6 years ago

OmniAuth Ruby gem Cross-site Request Forgery in request phase MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd3NHgtcndxNi1xcGdm

rubygems omniauth

High

almost 8 years ago

Omniauth allows POST parameters to be stored in session MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlwcjYtZ3JmNC14MmZy

rubygems omniauth

Filter by Severity

High 2 Critical 1