# doorkeeper (RubyGems) vulnerabilities Source: https://junglewise.ai/threats/technologies/rubygems-doorkeeper Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/rubygems-doorkeeper.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 7 vulnerabilities in doorkeeper (RubyGems): 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2023-34246, was published on 12 June 2023. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 7 (1 critical, 0 exploited in the wild) ## About doorkeeper (RubyGems) OAuth 2 authorization framework implementation for Ruby on Rails. ## Latest doorkeeper (RubyGems) vulnerabilities - [CVE-2023-34246: Doorkeeper Improper Authentication vulnerability](https://junglewise.ai/threats/cve-2023-34246-doorkeeper-improper-authentication-vulnerability) (low, CVSS 3.1, published 12 Jun 2023) - [CVE-2020-10187: Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper](https://junglewise.ai/threats/cve-2020-10187-exposure-of-sensitive-information-to-an-unauthorized-actor-in) (low, CVSS 3.1, published 7 May 2020) - [CVE-2014-8144: Doorkeeper vulnerable to Cross-site Request Forgery](https://junglewise.ai/threats/cve-2014-8144-doorkeeper-vulnerable-to-cross-site-request-forgery) (info, published 17 Sep 2018) - [Moderate severity vulnerability that affects doorkeeper](https://junglewise.ai/threats/moderate-severity-vulnerability-that-affects-doorkeeper-a7990bec) (info, published 13 Aug 2018) - [CVE-2018-1000211: Doorkeeper subject to Incorrect Permission Assignment](https://junglewise.ai/threats/cve-2018-1000211-doorkeeper-subject-to-incorrect-permission-assignment) (low, CVSS 3, published 13 Aug 2018) - [CVE-2018-1000088: Doorkeeper is vulnerable to stored XSS and code execution](https://junglewise.ai/threats/cve-2018-1000088-doorkeeper-is-vulnerable-to-stored-xss-and-code-execution) (low, CVSS 3, published 13 Mar 2018) - [CVE-2016-6582: Doorkeeper gem improper OAuth 2.0 token revocation implementation](https://junglewise.ai/threats/cve-2016-6582-doorkeeper-gem-improper-oauth-2-0-token-revocation-implementation) (critical, CVSS 9.1, published 23 Jan 2017) ## Most severe doorkeeper (RubyGems) vulnerabilities - [CVE-2016-6582: Doorkeeper gem improper OAuth 2.0 token revocation implementation](https://junglewise.ai/threats/cve-2016-6582-doorkeeper-gem-improper-oauth-2-0-token-revocation-implementation) (critical, CVSS 9.1, published 23 Jan 2017) - [CVE-2020-10187: Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper](https://junglewise.ai/threats/cve-2020-10187-exposure-of-sensitive-information-to-an-unauthorized-actor-in) (low, CVSS 3.1, published 7 May 2020) - [CVE-2023-34246: Doorkeeper Improper Authentication vulnerability](https://junglewise.ai/threats/cve-2023-34246-doorkeeper-improper-authentication-vulnerability) (low, CVSS 3.1, published 12 Jun 2023) - [CVE-2018-1000211: Doorkeeper subject to Incorrect Permission Assignment](https://junglewise.ai/threats/cve-2018-1000211-doorkeeper-subject-to-incorrect-permission-assignment) (low, CVSS 3, published 13 Aug 2018) - [CVE-2018-1000088: Doorkeeper is vulnerable to stored XSS and code execution](https://junglewise.ai/threats/cve-2018-1000088-doorkeeper-is-vulnerable-to-stored-xss-and-code-execution) (low, CVSS 3, published 13 Mar 2018) - [CVE-2014-8144: Doorkeeper vulnerable to Cross-site Request Forgery](https://junglewise.ai/threats/cve-2014-8144-doorkeeper-vulnerable-to-cross-site-request-forgery) (info, published 17 Sep 2018) - [Moderate severity vulnerability that affects doorkeeper](https://junglewise.ai/threats/moderate-severity-vulnerability-that-affects-doorkeeper-a7990bec) (info, published 13 Aug 2018) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other RubyGems technologies - [actionpack (RubyGems)](https://junglewise.ai/threats/technologies/actionpack): 77 vulnerabilities - [nokogiri (RubyGems)](https://junglewise.ai/threats/technologies/nokogiri): 69 vulnerabilities - [rack (RubyGems)](https://junglewise.ai/threats/technologies/rack): 55 vulnerabilities - [activerecord (RubyGems)](https://junglewise.ai/threats/technologies/rubygems-activerecord): 26 vulnerabilities - [rubygems-update (RubyGems)](https://junglewise.ai/threats/technologies/rubygems-update): 25 vulnerabilities - [puppet (RubyGems)](https://junglewise.ai/threats/technologies/puppet): 23 vulnerabilities - [activesupport (RubyGems)](https://junglewise.ai/threats/technologies/activesupport): 20 vulnerabilities - [actionview (RubyGems)](https://junglewise.ai/threats/technologies/actionview): 19 vulnerabilities - [activestorage (RubyGems)](https://junglewise.ai/threats/technologies/activestorage): 19 vulnerabilities - [camaleon_cms (RubyGems)](https://junglewise.ai/threats/technologies/camaleon-cms): 19 vulnerabilities - [rails-html-sanitizer (RubyGems)](https://junglewise.ai/threats/technologies/rails-html-sanitizer): 18 vulnerabilities - [loofah (RubyGems)](https://junglewise.ai/threats/technologies/loofah): 17 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "doorkeeper (RubyGems) vulnerabilities", https://junglewise.ai/threats/technologies/rubygems-doorkeeper, 13 November 2026.