EUVD-2022-6596

Malicious code in bioql PyPI...

GHSA-PM55-QFXR-H247 OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

CVE-2020-36599

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

CVE-2020-36599

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

CVE-2020-36599

Summary: CVE-2020-36599 affects the Ruby library OmniAuth, specifically lib/omniauth/failure_endpoint.rb. The issue occurs in OmniAuth before 1.9.2 and before 2.0 where the message_key value is not escaped, as described in the initial description and corroborated by references pointing to 1.9.2 r...