RubyGems/google_sign_in CVE-2025-57821: medium 4.2, EPSS 0.25%

Google Sign-In for Rails allowed redirects to malformed URLs

Action: Upgrade google_sign_in to 1.3.0 or later.

bundle update google_sign_in

Affected

Fixed versions

Sources

• osv: GHSA-7pwc-wh6m-44q3
• https://github.com/basecamp/google_sign_in/security/advisories/GHSA-7pwc-wh6m-44q3
• https://nvd.nist.gov/vuln/detail/CVE-2025-57821
• https://github.com/basecamp/google_sign_in/pull/73
• https://github.com/basecamp/google_sign_in/commit/85903651201257d4f14b97d4582e6d968ac32f15
• https://github.com/basecamp/google_sign_in/commit/a0548a604fb17e4eb1a57029f0d87e34e8499623
• https://github.com/basecamp/google_sign_in
• https://github.com/basecamp/google_sign_in/releases/tag/v1.3.0
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google_sign_in/CVE-2025-57821.yml

CVE-2025-57821 · published 2025-08-27T16:46:16Z · modified 2025-08-29T15:49:18.210384Z · JSON