{"action":"Upgrade doorkeeper-openid_connect to 1.5.4 or later.","affected":[{"fixed":"1.5.4","introduced":"1.4.0"}],"component":"doorkeeper-openid_connect","cve_ids":["CVE-2019-9837"],"ecosystem":"RubyGems","epss":0.01349,"exploited":false,"fixed_versions":["1.5.4"],"ghsa_id":"GHSA-vv4c-g6q7-p3q7","id":"tcs_01M5KENPABEZCN87EZVGDZ35CR","modified_at":"2023-11-08T04:01:47.891295Z","published_at":"2019-03-25T16:15:54Z","references":["https://osv.dev/vulnerability/GHSA-vv4c-g6q7-p3q7","https://nvd.nist.gov/vuln/detail/CVE-2019-9837","https://github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/61","https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/66","https://github.com/doorkeeper-gem/doorkeeper-openid_connect","https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vv4c-g6q7-p3q7","url":"https://osv.dev/vulnerability/GHSA-vv4c-g6q7-p3q7"}],"summary":"Doorkeeper-openid_connect contains Open Redirect"}