Skip to content
OpenAdvisories
Critical DLA-1956-1 1 CVE

ruby-openid - security update

Published Oct 11, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 ruby-openid 2.5.0debian-1+deb8u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-11027

    ruby-openid SSRF via claimed_id request

    Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to e…

    ruby-openid ruby-openid ruby-openid Debian Ubuntu RubyGems