Skip to content
OpenAdvisories

Package · Debian

ruby-openid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2019-11027

    ruby-openid SSRF via claimed_id request

    Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to e…

    ruby-openid ruby-openid ruby-openid Debian Ubuntu RubyGems
  • Medium —
    CVE-2013-1812

    Denial of service in ruby-openid

    The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

    ruby-openid ruby-openid Debian RubyGems