{"action":"Upgrade doorkeeper-openid_connect to 1.10.0 or later.","affected":[{"fixed":"1.10.0","introduced":"1.9.0"}],"component":"doorkeeper-openid_connect","cve_ids":["CVE-2026-44476"],"ecosystem":"RubyGems","epss":0.00564,"exploited":false,"fixed_versions":["1.10.0"],"ghsa_id":"GHSA-m6vc-f87m-cc2h","id":"tcs_01M5KEM5DBFG9R1SE4E07J9VMT","modified_at":"2026-06-09T12:00:16.158054391Z","published_at":"2026-06-04T14:37:11Z","references":["https://osv.dev/vulnerability/GHSA-m6vc-f87m-cc2h","https://github.com/doorkeeper-gem/doorkeeper-openid_connect/security/advisories/GHSA-m6vc-f87m-cc2h","https://github.com/doorkeeper-gem/doorkeeper-openid_connect","https://github.com/doorkeeper-gem/doorkeeper-openid_connect/releases/tag/v1.10.0","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper-openid_connect/CVE-2026-44476.yml","https://www.cve.org/CVERecord?id=CVE-2026-44476"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-m6vc-f87m-cc2h","url":"https://osv.dev/vulnerability/GHSA-m6vc-f87m-cc2h"},{"source":"nvd","source_id":"CVE-2026-44476","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44476"}],"summary":"Doorkeeper Openid Connect: Dynamic Client Registration feature creates public clients with client_secret"}