omniauth vulnerabilities (RubyGems)

3 vulnerabilities.

• omniauth RubyGems OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value CVE-2020-36599 Fix available 9.8 CriticalAugust 18, 2022
• omniauth RubyGems OmniAuth Ruby gem Cross-site Request Forgery in request phase CVE-2015-9284 Fix available 8.8 HighApril 26, 2019
• omniauth RubyGems Omniauth allows POST parameters to be stored in session CVE-2017-18076 Fix available 7.5 HighJanuary 26, 2018