https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 30 Jul 2026 16:14:46 +0000 https://vulnerability.circl.lu/sighting/7fa5fb4c-a804-4232-b1dc-b6b3992a7fc0/export {"uuid": "7fa5fb4c-a804-4232-b1dc-b6b3992a7fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54603", "type": "seen", "source": "https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9", "content": "# CVE-2026-54603: CVE-2026-54603: Cross-Origin Credential Leakage and SSRF via Protocol-Relative Redirects in ruby-oauth2\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54603\n\n## Summary\nAn issue in the ruby-oauth2 gem allows unauthenticated attackers to steal OAuth access tokens or perform Server-Side Request Forgery (SSRF) via a protocol-relative URI in HTTP Location redirect headers.\n\n## TL;DR\nThe oauth2 Ruby gem leaks active Authorization bearer tokens to untrusted external hosts when following protocol-relative redirects (starting with //) and enables server-side request forgery.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-601\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.6 (High)\n- **EPSS Score**: Not Available\n- **Impact**: High (Credential Disclosure / SSRF)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ruby applications using the oauth2 gem for OAuth authentication workflows\n- **oauth2**: >= 0.4.0, <= 2.0.21 (Fixed in: `2.0.22`)\n\n## Mitigation\n\n- Upgrade the oauth2 gem to version 2.0.22 or higher\n- Implement client-side header scrubbing during HTTP redirects within application code\n- Deploy network-level egress restrictions to block outbound application requests to arbitrary target IP addresses\n\n**Remediation Steps:**\n1. Open your application's Gemfile and locate the oauth2 dependency entry\n2. Modify the dependency constraint to require version >= 2.0.22\n3. Execute 'bundle update oauth2' to pull and install the patched library release\n4. Run your test suite to ensure OAuth identity provider connections remain stable under the sanitized context\n\n## References\n\n- [GitHub Security Advisory](https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9)\n- [NVD CVE-2026-54603](https://nvd.nist.gov/vuln/detail/CVE-2026-54603)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54603) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T20:31:48.743066Z"} {"uuid": "7fa5fb4c-a804-4232-b1dc-b6b3992a7fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54603", "type": "seen", "source": "https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9", "content": "# CVE-2026-54603: CVE-2026-54603: Cross-Origin Credential Leakage and SSRF via Protocol-Relative Redirects in ruby-oauth2\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54603\n\n## Summary\nAn issue in the ruby-oauth2 gem allows unauthenticated attackers to steal OAuth access tokens or perform Server-Side Request Forgery (SSRF) via a protocol-relative URI in HTTP Location redirect headers.\n\n## TL;DR\nThe oauth2 Ruby gem leaks active Authorization bearer tokens to untrusted external hosts when following protocol-relative redirects (starting with //) and enables server-side request forgery.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-601\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.6 (High)\n- **EPSS Score**: Not Available\n- **Impact**: High (Credential Disclosure / SSRF)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ruby applications using the oauth2 gem for OAuth authentication workflows\n- **oauth2**: >= 0.4.0, <= 2.0.21 (Fixed in: `2.0.22`)\n\n## Mitigation\n\n- Upgrade the oauth2 gem to version 2.0.22 or higher\n- Implement client-side header scrubbing during HTTP redirects within application code\n- Deploy network-level egress restrictions to block outbound application requests to arbitrary target IP addresses\n\n**Remediation Steps:**\n1. Open your application's Gemfile and locate the oauth2 dependency entry\n2. Modify the dependency constraint to require version >= 2.0.22\n3. Execute 'bundle update oauth2' to pull and install the patched library release\n4. Run your test suite to ensure OAuth identity provider connections remain stable under the sanitized context\n\n## References\n\n- [GitHub Security Advisory](https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9)\n- [NVD CVE-2026-54603](https://nvd.nist.gov/vuln/detail/CVE-2026-54603)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54603) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T20:31:48.743066Z"} https://vulnerability.circl.lu/sighting/7fa5fb4c-a804-4232-b1dc-b6b3992a7fc0/export Tue, 28 Jul 2026 20:31:48 +0000 https://vulnerability.circl.lu/sighting/6ebed066-aae8-49d1-ac59-25186af2611e/export {"uuid": "6ebed066-aae8-49d1-ac59-25186af2611e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54603", "type": "published-proof-of-concept", "source": "https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9", "content": "", "creation_timestamp": "2026-07-28T18:35:08.498367Z"} {"uuid": "6ebed066-aae8-49d1-ac59-25186af2611e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54603", "type": "published-proof-of-concept", "source": "https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9", "content": "", "creation_timestamp": "2026-07-28T18:35:08.498367Z"} https://vulnerability.circl.lu/sighting/6ebed066-aae8-49d1-ac59-25186af2611e/export Tue, 28 Jul 2026 18:35:08 +0000