D
Vendor security profile
doorkeeper-gem
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS5.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
0
CVE KEV
CVE severity distribution
2toplam CVE
Medium2 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%50
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.3
CVE-2026-44476
Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret
D
Patch status unknownEPSS %1
4.2
CVE-2026-70665
Doorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopes
D
Patch status unknownEPSS %0