Skip to content

Product

janrain ruby-openid vulnerabilities

1 published CVE affecting janrain ruby-openid, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest janrain ruby-openid CVEs

Newest publication first

  1. CVE-2013-1812 Denial of service in ruby-openid

    Published
    MediumCVSS 4.3 EPSS 2.1% PoC

    The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.