Skip to content
OpenAdvisories
Medium DLA-3494-1 1 CVE

ruby-doorkeeper - security update

Published Jul 12, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ruby-doorkeeper 4.4.2-1+deb10u1

Vulnerabilities 1

  • Medium 4.2
    CVE-2023-34246

    Doorkeeper Improper Authentication vulnerability

    Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable t…

    doorkeeper-gem doorkeeper doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems