Skip to content
OpenAdvisories
Medium DLA-3989-1 1 CVE

ruby-doorkeeper - security update

Published Dec 9, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 ruby-doorkeeper 5.3.0-2+deb11u1

Vulnerabilities 1

  • Medium 4.2
    CVE-2023-34246

    Doorkeeper Improper Authentication vulnerability

    Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable t…

    doorkeeper-gem doorkeeper doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems