ruby-oauth

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ruby-oauth records in CISA KEV

No ruby-oauth vulnerabilities are listed in CISA KEV.

2 records

TI-2026-39436 CVE-2026-54603 · GHSA-pp92-crg2-gfv9

HIGH 76

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00448 Published 2026-07-28 Partial fix · 2.0.22 CWE-200

TI-2026-39438 CVE-2026-54605 · GHSA-prq8-7wvh-44qh

HIGH 71

OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00188 Published 2026-07-28 Fixed in 1.1.6 CWE-200