doorkeeper-gem doorkeeper-openid_connect

• CVE-2026-44476 Medium 6.3 Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret 0.6%
• CVE-2026-70665 Medium 4.2 Doorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopes 0.3%