VDB
Sign up

package

RubyGems/oauth2

pkg:rubygems/oauth2

HIGH8.6RubyGems
GHSA-pp92-crg2-gfv9· CVE-2026-54603

OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

Modified: 9/10/2026