CVE-2020-36599: Improper Encoding or Escaping of Output

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...