omniauth vulnerabilities
2 published CVEs name omniauth among the affected products.
- 2Published CVEs2 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-63183
OmniAuth: Host Header Injection Vulnerability
omniauth · omniauth
Medium6.9 - CVE-2017-11430
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OmniAuth · OmnitAuth-SAML
High7.7