1 known security vulnerability

  • highGHSA-pp92-crg2-gfv9(CVE-2026-54603)

    OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

🔐 A Ruby wrapper for the OAuth 2.0 Authorization Framework, including the OAuth 2.1 draft spec, and OpenID Connect (OIDC)

Required Ruby Version

>= 2.2.0

Authors

Peter Boling, Erik Michaels-Ober, Michael Bleigh

Versions

  1. 2.0.25

    1. source

      1. 2.0.25 source July 15, 2026 (77.5 KB)
  2. 2.0.24

    1. source

      1. 2.0.24 source June 18, 2026 (76.5 KB)
  3. 2.0.23

    1. source

      1. 2.0.23 source June 13, 2026 (75 KB)
  4. 2.0.22

    1. source

      1. 2.0.22 source June 07, 2026 (74.5 KB)
  5. 2.0.21

    1. source

      1. 2.0.21 source June 07, 2026 (74 KB)
  6. 2.0.14

    1. source

      1. 2.0.14 source August 31, 2025 (77 KB)
Show all versions (81 total)

Pushed by

pboling

SHA 256 checksum

Signature validity period

May 04, 2025 - April 29, 2045
← Previous version Next version →