Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

doorkeeper-openid_connect

2 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium
Registry
RubyGems

Advisories 2

  • CVE-2026-44476Medium 6.3

    Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret

    Affected: from 1.9.0, fixed in 1.10.0.

  • Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the…

    Affected: from 1.4.0, fixed in 1.5.4.