https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:52:27.366666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-25753 cnvd-2019-25753 2026-10-04T00:52:27.370184+00:00 cnvd-2019-25753 https://cve.radiocsirt.org/vuln/euvd-2026-54149 EUVD-2026-54149 2026-10-04T00:52:27.370224+00:00 EUVD-2026-54149 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11027 fkie_cve-2019-11027 2026-10-04T00:52:27.370239+00:00

Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the "example app" provided by the project are at highest risk.

 https://cve.radiocsirt.org/vuln/ghsa-fqfj-cmh6-hj49 GHSA-fqfj-cmh6-hj49 — ruby-openid SSRF via claimed_id request 2026-10-04T00:52:27.370272+00:00

Affected: RubyGems: ruby-openid

Ruby OpenID (aka ruby-openid) through 2.8.0 is vulnerable to SSRF. Ruby-openid performs discovery first, and then verification. This allows an attacker to change the URL used for discovery and trick the server into connecting to the URL, which might be a private server not publicly accessible. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the "example app" provided by the project are at highest risk.

 https://cve.radiocsirt.org/vuln/gsd-2019-11027 gsd-2019-11027 2026-10-04T00:52:27.370299+00:00 gsd-2019-11027 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11027 UBUNTU-CVE-2019-11027 2026-10-04T00:52:27.370311+00:00

Affected: Ubuntu:16.04:LTS: ruby-openid, Ubuntu:18.04:LTS: ruby-openid

Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the "example app" provided by the project are at highest risk.