omniauth Latest Vulnerabilities

Latest vulnerabilities published by omniauth

JSON RSS CSV 🔔 Create Alert Trigger

4 November 2026

Host Header Injection Vulnerability in OmniAuth by OmniAuth
CVE-2026-63183
OmniauthOmniauth6.9MEDIUM

18 August 2022

Vulnerability in OmniAuth Affects Multiple Versions
CVE-2020-36599
OmniauthOmniauth9.8CRITICAL

7 February 2020

Code Execution Vulnerability in Omniauth-Weibo-OAuth2 Gem by Beenhero
CVE-2019-17268
Omniauth-weibo-oa...Omniauth-weibo-oauth29.8CRITICAL

11 December 2019

Access Token Security Flaw in Omniauth-Facebook for RubyGem
CVE-2013-4593
Omniauth-facebookOmniauth-facebook7.5HIGH

26 April 2019

Cross-Site Request Forgery Vulnerability in OmniAuth Ruby Gem by OmniAuth
CVE-2015-9284
OmniauthOmniauth Ruby Gem8.8HIGH

17 April 2019

Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
CVE-2017-11430
OmniauthOmnitauth-saml9.8CRITICAL

26 January 2018

Authentication Vulnerability in OmniAuth by OmniAuth
CVE-2017-18076
OmniauthOmniauth7.5HIGH

9 April 2013

Cross-Site Request Forgery in omniauth-oauth2 Gem by Intridea
CVE-2012-6134
Omniauth-oauth2 P...Omniauth-oauth2