Vulnerabilities in OmniAuth

2 results
CVE-2017-11430HIGHMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversalEPSS 2.4%CVE-2026-63183MEDIUMOmniAuth: Host Header Injection VulnerabilityEPSS 0.2%