CVE-2025-58067
1 advisory.
RubyGems/google_sign_in CVE-2025-58067: medium 4.2
Google Sign-In for Rails allowed redirect to protocol-relative URI
Action: Upgrade google_sign_in to 1.3.1 or later.
bundle update google_sign_inAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: GHSA-5jch-xhw4-r43v
- https://github.com/basecamp/google_sign_in/security/advisories/GHSA-5jch-xhw4-r43v
- https://nvd.nist.gov/vuln/detail/CVE-2025-58067
- https://github.com/basecamp/google_sign_in/pull/75
- https://github.com/basecamp/google_sign_in/commit/e97aef4626b1bcbd2c6f01f7dd25f12ac855d4cc
- https://github.com/basecamp/google_sign_in
- https://github.com/basecamp/google_sign_in/releases/tag/v1.3.1
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google_sign_in/CVE-2025-58067.yml
CVE-2025-58067 · published · modified · JSON