CVE-2026-54605

Summary: CVE-2026-54605 affects the Ruby OAuth gem (versions 0.5.5–1.1.5). The flaw in OAuth::Consumer#token_request follows 300–399 redirects by parsing the raw Location header and recursing, which can mutate the gem’s site/configuration and disclose signed OAuth request metadata (including the ...