CVE-2026-63183 | OmniAuth up to 2.1.x Provider Callback URL Derivation injection

November 4, 2026 Yanac

A vulnerability described as critical has been identified in OmniAuth up to 2.1.x. This vulnerability affects unknown code of the component Provider Callback URL Derivation. Executing a manipulation can lead to injection.

This vulnerability is registered as CVE-2026-63183. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More