Search CVE reports
1 – 2 of 2 results
Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web...
1 affected package
ruby-openid
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-openid | Not affected | Not affected | Not affected | Not affected | Fixed |
Some fixes available 3 of 4
The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.
2 affected packages
libopenid-ruby, ruby-openid
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libopenid-ruby | — | — | — | — | — |
| ruby-openid | — | — | — | — | — |