oauth2 vulnerabilities

1 known vulnerability in oauth2 from Ruby-oauth. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  oauth2: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-54603Jul 28, 2026Ruby-oauth

  OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC). From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Client#request overrides the request authority, so the bearer Authoriz