Skip to main content
← RubyGems

omniauth-facebook

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
RubyGems

Advisories 2

  • RubyGem omniauth-facebook has an access token security vulnerability

    Affected: fixed in 1.5.1.

  • The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct…

    Affected: from 1.4.1, fixed in 1.5.0.