omniauth-facebook (RubyGems) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package omniauth-facebook, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2013-4593 — CVSS 7.5 (high): RubyGem omniauth-facebook has an access token security vulnerability
• CVE-2013-4562 — CVSS 6.8 (medium): The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct…