HIGH 7.2 GitHub
CVE-2026-54605
OAuth: Cross-origin token-request redirects can expose signed request metadata
# Cross-origin OAuth token-request redirects can expose signed request metadata
## Summary
When an application uses `OAuth::Consumer` to request OAuth 1.0 request tokens or
access tokens, the token request helper follows `300..399` redirects returned by
the OAuth server. In affected versions, `OAuth::Consumer#token_request` parses the
raw `Location` header, follows the redirect recursively, and can mutate the
consumer's configured `site` when the redirect points to a different host with
the sa
Affected Products
- rubygems/oauth >= 0.5.5, <= 1.1.5
References
- https://github.com/advisories/GHSA-prq8-7wvh-44qh
- https://github.com/ruby-oauth/oauth/security/advisories/GHSA-prq8-7wvh-44qh
- https://github.com/ruby-oauth/oauth/commit/d069dc8c4c9631947451215f07460d6cdf0caf3f
- https://github.com/ruby-oauth/oauth/releases/tag/v1.1.6
This high severity vulnerability with a CVSS score of 7.2 was published on 2026-07-28 via GitHub. Affected: rubygems/oauth >= 0.5.5, <= 1.1.5.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.