Approved changes feed: RSS · Atom

cpe:2.3:a:omniauth:omniauth:2.0.0:pre.rc1:*:*:*:*:*:*

part: a version: 2.0.0 update: pre.rc1

VendorOmniauth (05e52dd3-caba-5347-a24f-6a595e88f28a)
ProductOmniauth (7d04c742-33be-5bd4-b4a0-f95908cb83f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ruby-omniauth purl2cpe 2026-06-01 10:17:55.720770
pkg:deb/ubuntu/ruby-omniauth purl2cpe 2026-06-01 10:17:55.720773
pkg:gem/omniauth purl2cpe 2026-06-01 10:17:55.720814
pkg:github/omniauth/omniauth purl2cpe 2026-06-01 10:17:55.720816
pkg:rpm/opensuse/rubygem-omniauth purl2cpe 2026-06-01 10:17:55.720817

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36599 vulnerable 2026-06-08 05:25:49.159267 Details available
lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.
Published: 2022-08-18T22:48:07.000Z
Updated: 2024-08-04T17:30:08.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.