{"action":"Upgrade doorkeeper to 5.0.3 or later.","affected":[{"fixed":"5.0.3","introduced":"5.0.0"},{"fixed":"5.1.1","introduced":"5.1.0"},{"fixed":"5.2.5","introduced":"5.2.0"},{"fixed":"5.3.2","introduced":"5.3.0"}],"component":"doorkeeper","cve_ids":["CVE-2020-10187"],"ecosystem":"RubyGems","epss":0.01782,"exploited":false,"fixed_versions":["5.0.3","5.1.1","5.2.5","5.3.2"],"ghsa_id":"GHSA-j7vx-8mqj-cqp9","id":"tcs_01M5KEKTYAAPB8XQ3WVGDC2G1C","modified_at":"2026-09-10T03:48:45.853099273Z","published_at":"2020-05-07T21:11:07Z","references":["https://osv.dev/vulnerability/GHSA-j7vx-8mqj-cqp9","https://github.com/doorkeeper-gem/doorkeeper/security/advisories/GHSA-j7vx-8mqj-cqp9","https://nvd.nist.gov/vuln/detail/CVE-2020-10187","https://github.com/rubysec/ruby-advisory-db/pull/446","https://github.com/doorkeeper-gem/doorkeeper/commit/25d038022c2fcad45af5b73f9d003cf38ff491f6","https://github.com/doorkeeper-gem/doorkeeper/releases","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2020-10187.yml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-j7vx-8mqj-cqp9","url":"https://osv.dev/vulnerability/GHSA-j7vx-8mqj-cqp9"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper"}