Launchpad.net

Launchpad CVE tracker

CVE 2020-36599

lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

See the

CVE page on Mitre.org for more details.

References

MISC: https://github.com/omn...
MISC: https://rubygems.org/g...