oauth2 vulnerabilities (RubyGems)

1 vulnerability.

• oauth2 RubyGems OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host CVE-2026-54603 Fix available 8.6 HighJuly 28, 2026