{"action":"Upgrade doorkeeper to 5.6.6 or later.","affected":[{"fixed":"5.6.6","introduced":"0"}],"component":"doorkeeper","cve_ids":["CVE-2023-34246"],"ecosystem":"RubyGems","epss":0.00716,"exploited":false,"fixed_versions":["5.6.6"],"ghsa_id":"GHSA-7w2c-w47h-789w","id":"tcs_01M5KEHTNQYT7X5QTPED9HYCJN","modified_at":"2026-09-10T03:50:02.187700390Z","published_at":"2023-06-12T19:50:34Z","references":["https://osv.dev/vulnerability/GHSA-7w2c-w47h-789w","https://github.com/doorkeeper-gem/doorkeeper/security/advisories/GHSA-7w2c-w47h-789w","https://nvd.nist.gov/vuln/detail/CVE-2023-34246","https://github.com/doorkeeper-gem/doorkeeper/issues/1589","https://github.com/doorkeeper-gem/doorkeeper/pull/1646","https://github.com/doorkeeper-gem/doorkeeper","https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v5.6.6","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2023-34246.yml","https://lists.debian.org/debian-lts-announce/2023/07/msg00016.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00010.html","https://www.rfc-editor.org/rfc/rfc8252#section-8.6"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-7w2c-w47h-789w","url":"https://osv.dev/vulnerability/GHSA-7w2c-w47h-789w"}],"summary":"Doorkeeper Improper Authentication vulnerability"}