Skip to content
OpenAdvisories

Package · Ubuntu

ruby-openid

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2019-11027

    ruby-openid SSRF via claimed_id request

    Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to e…

    ruby-openid ruby-openid ruby-openid Debian Ubuntu RubyGems