RU
Vendor
ruby-oauth
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54603 | OA oauth2 ruby-oauth | 8.6 | Jul 28 | OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host |
| CVE-2026-54605 | OA oauth ruby-oauth | 7.2 | Jul 28 | OAuth: Cross-origin token-request redirects can expose signed request metadata |