CVE-2019-9837
1 advisory.
RubyGems/doorkeeper-openid_connect CVE-2019-9837: medium 6.1, EPSS 1.35%
Doorkeeper-openid_connect contains Open Redirect
Action: Upgrade doorkeeper-openid_connect to 1.5.4 or later.
bundle update doorkeeper-openid_connectAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.5.4 | - |
Fixed versions
| 1.5.4 |
Sources
- osv: GHSA-vv4c-g6q7-p3q7
- https://nvd.nist.gov/vuln/detail/CVE-2019-9837
- https://github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/61
- https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/66
- https://github.com/doorkeeper-gem/doorkeeper-openid_connect
- https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
CVE-2019-9837 · published · modified · JSON