Skip to content
OpenAdvisories

Package · Ubuntu

ruby-oauth

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.2
    CVE-2026-54605

    OAuth: Cross-origin token-request redirects can expose signed request metadata

    OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumer#token_request parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recur…

    ruby-oauth oauth oauth ruby-oauth Ubuntu RubyGems
  • High 7.4
    CVE-2016-11086

    Improper Certificate Validation in oauth ruby gem

    lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

    oauth ruby-oauth ruby-oauth Debian Ubuntu RubyGems