Known Vulnerabilities for Oauth by Ruby-oauth
Listed below are 10 of the newest known vulnerabilities associated with "Oauth" by "Ruby-oauth".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-67437 json | OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/... | Not Provided | 2026-07-29 | 2026-07-30 |
| CVE-2026-67345 json | MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedi... | Not Provided | 2026-07-30 | 2026-07-30 |
| CVE-2026-67335 json | better-auth versions before 1.6.2 fail to validate the OAuth state parameter against the stored nonce when using cookie-backe... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67333 json | better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redirect_... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67332 json | @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clie... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67330 json | @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-bet... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67244 json | A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-cont... | Not Provided | 2026-07-30 | 2026-07-30 |
| CVE-2026-65596 json | n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credent... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-65594 json | n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was intr... | Not Provided | 2026-07-22 | 2026-07-23 |
| CVE-2026-63768 json | cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback endpoint that allows attacke... | Not Provided | 2026-07-20 | 2026-07-21 |