CVE-2016-11086
1 advisory.
RubyGems/oauth CVE-2016-11086: high 7.4
Improper Certificate Validation in oauth ruby gem
Action: Upgrade oauth to 0.5.5 or later.
bundle update oauthAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.5 | - |
Fixed versions
| 0.5.5 |
Sources
- osv: GHSA-7359-3c6r-hfc2
- https://nvd.nist.gov/vuln/detail/CVE-2016-11086
- https://github.com/oauth-xx/oauth-ruby/issues/137
- https://github.com/oauth-xx/oauth-ruby/commit/eb5b00a91d4ef0899082fdba929c34ccad6d4ccb
- https://github.com/oauth-xx/oauth-ruby
- https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.5
- https://rubygems.org/gems/oauth
CVE-2016-11086 · published · modified · JSON