Home Packages KEV Critical Insights

Loading…

Data from OSV.dev, CISA KEV, and FIRST EPSS.GitHub

RubyGems/omniauth — 3 CVEs · VulnScope

pkg:RubyGems/omniauth

3 total CVEsCRITICAL1HIGH2

✅ Check your installed version

All known vulnerabilities

CRITICAL9.8CVE-2020-36599OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
from 0, < 1.9.2
HIGH8.8CVE-2015-9284OmniAuth Ruby gem Cross-site Request Forgery in request phase
from 0, < 2.0.0
HIGH7.5CVE-2017-18076ruby-omniauth - security update
from 0, < 1.3.2