- How many CVEs does OmniAuth have?
- OmniAuth has 8 published CVE records since 2018, including 3 in the last two years.
- How many OmniAuth CVEs are in CISA KEV?
- None of OmniAuth's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which OmniAuth products have the most CVEs?
- The OmniAuth products with the most published CVEs are omniauth saml, omniauth-saml, omniauth, omniauth-rails, OmnitAuth-SAML.
- What are the most common weakness types in OmniAuth CVEs?
- OmniAuth's CVEs most often map to these CWE weakness types: CWE-347 (Improper Verification of Cryptographic Signature), CWE-116 (Improper Encoding or Escaping of Output), CWE-287 (Improper Authentication), CWE-352 (Cross-Site Request Forgery (CSRF)).
- Are there public exploits for OmniAuth vulnerabilities?
- Yes — 5 of OmniAuth's CVEs have a known public exploit.
- How many critical OmniAuth vulnerabilities are there?
- OmniAuth has 5 critical and 3 high-severity CVEs.
- What is the average severity of OmniAuth CVEs?
- The average CVSS base score across OmniAuth's scored CVEs is 9.0.