ruby-omniauth vulnerabilities (Debian)

3 vulnerabilities.

• ruby-omniauth Debian OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value CVE-2020-36599 Fix available 9.8 CriticalAugust 18, 2022
• ruby-omniauth Debian OmniAuth Ruby gem Cross-site Request Forgery in request phase CVE-2015-9284 Fix available 8.8 HighApril 26, 2019
• ruby-omniauth Debian Omniauth allows POST parameters to be stored in session CVE-2017-18076 Fix available 7.5 HighJanuary 26, 2018