oauth vulnerabilities

1 known vulnerability in oauth from Ruby-oauth. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  oauth: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-54605Jul 28, 2026Ruby-oauth

  OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumer#token_request parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recurs