Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Doorkeeper-gem
Doorkeeper-openid Connect
Doorkeeper-gem Doorkeeper-openid Connect vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
doorkeeper-gem
doorkeeper-openid connect
Doorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopes
CVE-2026-70665
Fix available
4.2
Medium
August 25, 2026
doorkeeper-gem
doorkeeper-openid connect
Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret
CVE-2026-44476
Fix available
6.3
Medium
June 4, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open