All 2 CVE vulnerabilities found in doorkeeper-openid_connect, with AI-generated Chinese analysis, references, and POCs.
Vendor: doorkeeper-gem
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-44476 | Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret CWE-287 | 6.3 | Medium | 2026-08-25 |
| CVE-2026-70665 | Doorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopes CWE-285 | 4.2 | Medium | 2026-08-25 |
All 2 known CVE vulnerabilities affecting doorkeeper-openid_connect with full Chinese analysis, references, and POCs where available.