Rruby-oauth

Products

Exploited and recent CVEs

• CVE-2026-54603 High 8.6 OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host 0.4%
• CVE-2026-54605 High 7.2 OAuth: Cross-origin token-request redirects can expose signed request metadata 0.2%