https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:06:23.665392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-6582 CVE-2016-6582 2026-10-04T02:06:23.686568+00:00

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.

 https://cve.radiocsirt.org/vuln/usn-7394-1 USN-7394-1 — ruby-doorkeeper vulnerabilities 2026-10-04T02:06:23.686622+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby-doorkeeper

Jonathan Clem and Justin Bull discovered that Doorkeeper could allow arbitrary token revocation and replay attacks. An attacker could possibly use this issue to gain unauthorized access to a system. (CVE-2016-6582)

It was discovered that Doorkeeper incorrectly handled storing client names. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2018-1000088)