Vulnerabilities in doorkeeper-gem

3 results

CVE-2023-34246MEDIUMDoorkeeper Improper Authentication vulnerabilityEPSS 0.7%CVE-2026-44476MEDIUMDoorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secretEPSS 0.6%CVE-2026-70665MEDIUMDoorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopesEPSS 0.3%