What’s Vulnerable › Products

ruby-oauth oauth2 vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ruby-oauth oauth2 version is affected

Latest ruby-oauth oauth2 vulnerabilities

• CVE-2026-54603 — OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host (CVSS 8.6)