PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
omniauth OmniAuth: Host Header Injection Vulnerability Medium Risk 6.0 6 hours ago 6 hours ago
omniauth_ebay Malicious code in omniauth_ebay (RubyGems) Unknown 2 years ago 1 month ago
omniauth_ebay-oauth Malicious code in omniauth_ebay-oauth (RubyGems) Unknown 2 years ago 1 month ago
omniauth_marvin Malicious code in omniauth_marvin (RubyGems) Unknown 2 years ago 1 month ago
omniauth_mixer Malicious code in omniauth_mixer (RubyGems) Unknown 2 years ago 1 month ago
omniauth-microsoft_graph Omniauth::MicrosoftGraph Account takeover (nOAuth) High Risk 8.6 2 years ago 2 months ago
omniauth-apple omniauth-apple allows attacker to fake their email address during authentication High Risk 7.7 5 years ago 2 months ago
omniauth-recharge-rails-example Malicious code in omniauth-recharge-rails-example (npm) Unknown 2 months ago 2 months ago
omniauth-saml omniauth-saml vulnerable to Improper Verification of Cryptographic Signature Critical 10.0 2 years ago 3 months ago
omniauth-pro-sante-connect Malicious code in omniauth-pro-sante-connect (RubyGems) Unknown 1 year ago 3 months ago
omniauth-auth0 Regression in JWT Signature Validation High Risk 7.4 6 years ago 4 months ago
omniauth-saml omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issue Critical 9.5 1 year ago 9 months ago
omniauth-shopify-oauth2 Malicious code in omniauth-shopify-oauth2 (npm) Unknown 1 year ago 1 year ago
omniauth-oauth2 omniauth-oauth2 Cross-Site Request Forgery vulnerability Medium Risk 6.0 9 years ago 1 year ago
omniauth Omniauth allows POST parameters to be stored in session High Risk 7.5 8 years ago 1 year ago
omniauth-facebook omniauth-facebook Cross-Site Request Forgery vulnerability Medium Risk 6.0 9 years ago 1 year ago
omniauth OmniAuth Ruby gem Cross-site Request Forgery in request phase High Risk 8.8 7 years ago 2 years ago
omniauth-saml OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal High Risk 7.7 7 years ago 2 years ago
omniauth_amazon rest-client Gem Contains Malicious Code Critical 9.8 7 years ago 2 years ago
omniauth OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value Critical 9.8 4 years ago 3 years ago
omniauth-weibo-oauth2 omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party Critical 9.8 4 years ago 3 years ago
omniauth-facebook omniauth-facebook Improper Authentication vulnerability High Risk 7.5 4 years ago 3 years ago
Data courtesy of OSV.dev
Page 1