HIGH7.5RubyGems
GHSA-9pr6-grf4-x2fr· CVE-2017-18076Omniauth allows POST parameters to be stored in session
Modified: 12/3/2024
package
pkg:rubygems/omniauth
Omniauth allows POST parameters to be stored in session
Modified: 12/3/2024
OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
Modified: 11/8/2023
OmniAuth Ruby gem Cross-site Request Forgery in request phase
Modified: 2/16/2024