RubyGems/oauth CVE-2016-11086: high 7.4, EPSS 0.86%

Improper Certificate Validation in oauth ruby gem

Action: Upgrade oauth to 0.5.5 or later.

bundle update oauth

Affected

Fixed versions

Sources

• osv: GHSA-7359-3c6r-hfc2
• https://nvd.nist.gov/vuln/detail/CVE-2016-11086
• https://github.com/oauth-xx/oauth-ruby/issues/137
• https://github.com/oauth-xx/oauth-ruby/commit/eb5b00a91d4ef0899082fdba929c34ccad6d4ccb
• https://github.com/oauth-xx/oauth-ruby
• https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.5
• https://rubygems.org/gems/oauth

CVE-2016-11086 · published 2021-04-22T16:22:15Z · modified 2023-11-08T03:58:21.880410Z · JSON