EUVD-2026-94317

Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the default crypto.cipherKey 'sensitiveKey'. Attackers who can read Redis can decrypt tokenEncrypted values and combine th...

Dart 信任管理问题漏洞

Dart is an open source programming language. The Dart SDK has a security vulnerability in that when a package is published to a third-party package server using the dart pub publish command, the request is authenticated using the oauth2 accesstoken, which is valid for publishing on pub.dev. Using...

CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

Session fixation

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

PT-2017-8995

Name of the Vulnerable Software and Affected Versions Doorkeeper gem versions prior to 4.2.0 Description The issue allows remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging the failure to implement the OAuth 2.0 Token Revocation specification. Recommendations For...