doorkeeper-openid_connect vulnerabilities

CVEs whose affected-version data names the doorkeeper-openid_connect package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-44476Medium· 6.3PoC

4w ago

Doorkeeper is an OAuth 2 provider for Ruby on Rails

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's client_id, which is public information, can authenticate as that client at the token endpoint and obtain …

▾ Twilightdoorkeeper-gem · doorkeeper-openid_connectEPSS 0.32%via NVD