HIGH8.6RubyGems
GHSA-pp92-crg2-gfv9· CVE-2026-54603OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host
Modified: 9/10/2026
package
pkg:rubygems/oauth2
OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host
Modified: 9/10/2026