doorkeeper-gem
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| doorkeeper-openid_connect | 2 | – | Aug 25, 2026 |
| doorkeeper | 1 | – | Jun 12, 2023 |
Exploited and recent CVEs
- CVE-2026-44476 Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret 0.6%
- CVE-2026-70665 Doorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopes 0.3%
- CVE-2023-34246 Doorkeeper Improper Authentication vulnerability 0.7%