From 24b3ca7b66509016665357d11f369c1dc41278be Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Tue, 9 Jan 2024 00:04:43 +0000 Subject: [PATCH 01/12] Create techstack.yml --- techstack.yml | 158 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 158 insertions(+) create mode 100644 techstack.yml diff --git a/techstack.yml b/techstack.yml new file mode 100644 index 0000000..b35f5be --- /dev/null +++ b/techstack.yml @@ -0,0 +1,158 @@ +repo_name: stackshareio/omniauth-azure-oauth2 +report_id: 10977dff12710192ea944fd114c1fc5d +version: 0.1 +repo_type: Public +timestamp: '2024-01-09T00:04:41+00:00' +requested_by: joshk0 +provider: github +branch: master +detected_tools_count: 10 +tools: +- name: Ruby + description: A dynamic, interpreted, open source programming language with a focus + on simplicity and productivity + website_url: https://www.ruby-lang.org + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/989/ruby.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2 + detection_source: Repo Metadata +- name: Sinatra + description: Classy web-development dressed in a DSL + website_url: http://www.sinatrarb.com/ + license: MIT + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Microframeworks (Backend) + image_url: https://img.stackshare.io/service/999/logo.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/Gemfile + detection_source: Gemfile + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: Git + description: Fast, scalable, distributed revision control system + website_url: http://git-scm.com/ + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Version Control System + image_url: https://img.stackshare.io/service/1046/git.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2 + detection_source: Repo Metadata +- name: RSpec + description: Behaviour Driven Development for Ruby + website_url: https://rspec.info/ + version: 2.14.0 + license: MIT + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Testing Frameworks + image_url: https://img.stackshare.io/service/2539/logo.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: RubyGems + description: Easily download, install, and use ruby software packages on your system + website_url: https://rubygems.org/ + open_source: false + hosted_saas: false + category: Build, Test, Deploy + sub_category: Package Managers + image_url: https://img.stackshare.io/service/12795/5jL6-BA5_400x400.jpeg + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: Travis CI + description: A hosted continuous integration service for open source and private + projects + website_url: http://travis-ci.com/ + open_source: false + hosted_saas: true + category: Build, Test, Deploy + sub_category: Continuous Integration + image_url: https://img.stackshare.io/service/460/Lu6cGu0z_400x400.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/.travis.yml + detection_source: ".travis.yml" + last_updated_by: Mark Nadig + last_updated_on: 2016-02-16 17:34:29.000000000 Z +- name: jwt + description: A pure ruby implementation of the RFC 7519 OAuth JSON Web Token + package_url: https://rubygems.org/jwt + version: '1.0' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18991/default_e5e3569d4beb5d51f9ce87c88e8b44a2308e087b.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: omniauth + description: A generalized Rack framework for multiple-provider authentication + package_url: https://rubygems.org/omniauth + version: '1.0' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18914/default_aa081534cc9e2d100412a763ab69743f22c56ceb.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Nick Campbell + last_updated_on: 2016-05-18 18:54:44.000000000 Z + vulnerabilities: + - name: OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` + value + cve_id: CVE-2020-36599 + cve_url: https://github.com/advisories/GHSA-pm55-qfxr-h247 + detected_date: Sep 1 + severity: critical + first_patched: 1.9.2 + - name: Omniauth allows POST parameters to be stored in session + cve_id: CVE-2017-18076 + cve_url: https://github.com/advisories/GHSA-9pr6-grf4-x2fr + detected_date: Aug 22 + severity: high + first_patched: 1.3.2 + - name: OmniAuth Ruby gem Cross-site Request Forgery in request phase + cve_id: CVE-2015-9284 + cve_url: https://github.com/advisories/GHSA-ww4x-rwq6-qpgf + detected_date: Aug 22 + severity: high + first_patched: 2.0.0 +- name: omniauth-oauth2 + description: An abstract OAuth2 strategy for OmniAuth + package_url: https://rubygems.org/omniauth-oauth2 + version: '1.4' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18909/default_6011c3e13c0feeff577120981a21a5968e50756a.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Nick Campbell + last_updated_on: 2016-05-18 18:54:44.000000000 Z +- name: rake + description: Rake is a Make-like program implemented in Ruby + package_url: https://rubygems.org/rake + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18812/default_f582e4648f4682adb72d2b201218cda7f8e894ac.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z From 6b6ac54499607be779c5f599563fad2ebc4ca4da Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Tue, 9 Jan 2024 00:04:44 +0000 Subject: [PATCH 02/12] Create techstack.md --- techstack.md | 115 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 115 insertions(+) create mode 100644 techstack.md diff --git a/techstack.md b/techstack.md new file mode 100644 index 0000000..5a5cdcd --- /dev/null +++ b/techstack.md @@ -0,0 +1,115 @@ + +
+ +# Tech Stack File +![](https://img.stackshare.io/repo.svg "repo") [stackshareio/omniauth-azure-oauth2](https://github.com/stackshareio/omniauth-azure-oauth2)![](https://img.stackshare.io/public_badge.svg "public") +

+|10
Tools used|01/09/24
Report generated| +|------|------| +
+ +## Languages (1) + + + + +
+ Ruby +
+ Ruby +
+ +
+ +## Frameworks (1) + + + + +
+ Sinatra +
+ Sinatra +
+ +
+ +## DevOps (4) + + + + + + + + + + +
+ Git +
+ Git +
+ +		 + RSpec +
+ RSpec +
+ v2.14.0 +		 + RubyGems +
+ RubyGems +
+ +		 + Travis CI +
+ Travis CI +
+ +
+ + +## Open source packages (4) + +## RubyGems (4) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[jwt](https://rubygems.org/jwt)|v1.0|05/30/14|Mark Nadig |MIT|N/A| +|[omniauth](https://rubygems.org/omniauth)|v1.0|05/18/16|Nick Campbell |MIT|[CVE-2020-36599](https://github.com/advisories/GHSA-pm55-qfxr-h247) (Critical)
[CVE-2017-18076](https://github.com/advisories/GHSA-9pr6-grf4-x2fr) (High)
[CVE-2015-9284](https://github.com/advisories/GHSA-ww4x-rwq6-qpgf) (High)| +|[omniauth-oauth2](https://rubygems.org/omniauth-oauth2)|v1.4|05/18/16|Nick Campbell |MIT|N/A| +|[rake](https://rubygems.org/rake)|N/A|05/30/14|Mark Nadig |MIT|N/A| + +
+
+ +Generated via [Stack File](https://github.com/marketplace/stack-file) From 41104e43b95fab46d92813d91120729a57c0892d Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Thu, 15 Feb 2024 18:29:37 +0000 Subject: [PATCH 03/12] Update techstack.yml --- techstack.yml | 84 +++++++-------------------------------------------- 1 file changed, 11 insertions(+), 73 deletions(-) diff --git a/techstack.yml b/techstack.yml index b35f5be..15e691a 100644 --- a/techstack.yml +++ b/techstack.yml @@ -1,12 +1,12 @@ repo_name: stackshareio/omniauth-azure-oauth2 -report_id: 10977dff12710192ea944fd114c1fc5d +report_id: ddf45ec6ccfd0205253b6b18fd615197 version: 0.1 repo_type: Public -timestamp: '2024-01-09T00:04:41+00:00' +timestamp: '2024-02-15T18:29:35+00:00' requested_by: joshk0 provider: github branch: master -detected_tools_count: 10 +detected_tools_count: 7 tools: - name: Ruby description: A dynamic, interpreted, open source programming language with a focus @@ -64,8 +64,8 @@ tools: category: Build, Test, Deploy sub_category: Package Managers image_url: https://img.stackshare.io/service/12795/5jL6-BA5_400x400.jpeg - detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec - detection_source: omniauth-azure-oauth2.gemspec + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/Gemfile + detection_source: Gemfile last_updated_by: Mark Nadig last_updated_on: 2014-05-30 01:05:17.000000000 Z - name: Travis CI @@ -81,77 +81,15 @@ tools: detection_source: ".travis.yml" last_updated_by: Mark Nadig last_updated_on: 2016-02-16 17:34:29.000000000 Z -- name: jwt - description: A pure ruby implementation of the RFC 7519 OAuth JSON Web Token - package_url: https://rubygems.org/jwt - version: '1.0' - license: MIT - open_source: true - hosted_saas: false - category: Libraries - sub_category: RubyGems Packages - image_url: https://img.stackshare.io/package/18991/default_e5e3569d4beb5d51f9ce87c88e8b44a2308e087b.png - detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec - detection_source: omniauth-azure-oauth2.gemspec - last_updated_by: Mark Nadig - last_updated_on: 2014-05-30 01:05:17.000000000 Z -- name: omniauth - description: A generalized Rack framework for multiple-provider authentication - package_url: https://rubygems.org/omniauth - version: '1.0' - license: MIT - open_source: true - hosted_saas: false - category: Libraries - sub_category: RubyGems Packages - image_url: https://img.stackshare.io/package/18914/default_aa081534cc9e2d100412a763ab69743f22c56ceb.png - detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec - detection_source: omniauth-azure-oauth2.gemspec - last_updated_by: Nick Campbell - last_updated_on: 2016-05-18 18:54:44.000000000 Z - vulnerabilities: - - name: OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` - value - cve_id: CVE-2020-36599 - cve_url: https://github.com/advisories/GHSA-pm55-qfxr-h247 - detected_date: Sep 1 - severity: critical - first_patched: 1.9.2 - - name: Omniauth allows POST parameters to be stored in session - cve_id: CVE-2017-18076 - cve_url: https://github.com/advisories/GHSA-9pr6-grf4-x2fr - detected_date: Aug 22 - severity: high - first_patched: 1.3.2 - - name: OmniAuth Ruby gem Cross-site Request Forgery in request phase - cve_id: CVE-2015-9284 - cve_url: https://github.com/advisories/GHSA-ww4x-rwq6-qpgf - detected_date: Aug 22 - severity: high - first_patched: 2.0.0 -- name: omniauth-oauth2 - description: An abstract OAuth2 strategy for OmniAuth - package_url: https://rubygems.org/omniauth-oauth2 - version: '1.4' - license: MIT - open_source: true - hosted_saas: false - category: Libraries - sub_category: RubyGems Packages - image_url: https://img.stackshare.io/package/18909/default_6011c3e13c0feeff577120981a21a5968e50756a.png - detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec - detection_source: omniauth-azure-oauth2.gemspec - last_updated_by: Nick Campbell - last_updated_on: 2016-05-18 18:54:44.000000000 Z -- name: rake - description: Rake is a Make-like program implemented in Ruby - package_url: https://rubygems.org/rake +- name: Rake + description: A software task management and build automation tool + website_url: https://github.com/ruby/rake license: MIT open_source: true hosted_saas: false - category: Libraries - sub_category: RubyGems Packages - image_url: https://img.stackshare.io/package/18812/default_f582e4648f4682adb72d2b201218cda7f8e894ac.png + category: Application Utilities + sub_category: Task Management + image_url: https://ucarecdn.com/79629173-de2d-4cdf-8509-6d1411b382e7/ detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec detection_source: omniauth-azure-oauth2.gemspec last_updated_by: Mark Nadig From 96b82ddd2d0a2035738a0778d59d7fd9293fac45 Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Thu, 15 Feb 2024 18:29:37 +0000 Subject: [PATCH 04/12] Update techstack.md --- techstack.md | 25 ++++++++++++++----------- 1 file changed, 14 insertions(+), 11 deletions(-) diff --git a/techstack.md b/techstack.md index 5a5cdcd..2f124e3 100644 --- a/techstack.md +++ b/techstack.md @@ -7,6 +7,7 @@ stackshareio/omniauth-azure-oauth2 is built on the following main stack: - [Sinatra](http://www.sinatrarb.com/) – Microframeworks (Backend) - [RSpec](https://rspec.info/) – Testing Frameworks - [Travis CI](http://travis-ci.com/) – Continuous Integration +- [Rake](https://github.com/ruby/rake) – Task Management Full tech stack [here](/techstack.md) @@ -20,6 +21,7 @@ stackshareio/omniauth-azure-oauth2 is built on the following main stack: - Sinatra [Sinatra](http://www.sinatrarb.com/) – Microframeworks (Backend) - RSpec [RSpec](https://rspec.info/) – Testing Frameworks - Travis CI [Travis CI](http://travis-ci.com/) – Continuous Integration +- Rake [Rake](https://github.com/ruby/rake) – Task Management Full tech stack [here](/techstack.md) @@ -30,7 +32,7 @@ Full tech stack [here](/techstack.md) # Tech Stack File ![](https://img.stackshare.io/repo.svg "repo") [stackshareio/omniauth-azure-oauth2](https://github.com/stackshareio/omniauth-azure-oauth2)![](https://img.stackshare.io/public_badge.svg "public")

-|10
Tools used|01/09/24
Report generated| +|7
Tools used|02/15/24
Report generated| |------|------|
@@ -97,17 +99,18 @@ Full tech stack [here](/techstack.md) +## Other (1) + + -## Open source packages (4) - -## RubyGems (4) - -|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| -|:------|:------|:------|:------|:------|:------| -|[jwt](https://rubygems.org/jwt)|v1.0|05/30/14|Mark Nadig |MIT|N/A| -|[omniauth](https://rubygems.org/omniauth)|v1.0|05/18/16|Nick Campbell |MIT|[CVE-2020-36599](https://github.com/advisories/GHSA-pm55-qfxr-h247) (Critical)
[CVE-2017-18076](https://github.com/advisories/GHSA-9pr6-grf4-x2fr) (High)
[CVE-2015-9284](https://github.com/advisories/GHSA-ww4x-rwq6-qpgf) (High)| -|[omniauth-oauth2](https://rubygems.org/omniauth-oauth2)|v1.4|05/18/16|Nick Campbell |MIT|N/A| -|[rake](https://rubygems.org/rake)|N/A|05/30/14|Mark Nadig |MIT|N/A| + +
+ Rake +
+ Rake +
+ +

From 55ca0cf242e8095c953ac8ecbfb0660487fe8de4 Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Thu, 15 Feb 2024 18:43:52 +0000 Subject: [PATCH 05/12] Update techstack.yml --- techstack.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/techstack.yml b/techstack.yml index 15e691a..8f04f44 100644 --- a/techstack.yml +++ b/techstack.yml @@ -1,8 +1,8 @@ repo_name: stackshareio/omniauth-azure-oauth2 -report_id: ddf45ec6ccfd0205253b6b18fd615197 +report_id: 693534bbd919a21a08d93aee005c0837 version: 0.1 repo_type: Public -timestamp: '2024-02-15T18:29:35+00:00' +timestamp: '2024-02-15T18:43:51+00:00' requested_by: joshk0 provider: github branch: master From 438d53124b751ac0f21c62c2664ed733cba48db6 Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Thu, 15 Feb 2024 18:43:53 +0000 Subject: [PATCH 06/12] Update techstack.md From 6ca8f2affc31ef4b8a706b661960fe125bdf4a6b Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Fri, 16 Feb 2024 00:20:17 +0000 Subject: [PATCH 07/12] Update techstack.yml --- techstack.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/techstack.yml b/techstack.yml index 8f04f44..b1301f0 100644 --- a/techstack.yml +++ b/techstack.yml @@ -1,8 +1,8 @@ repo_name: stackshareio/omniauth-azure-oauth2 -report_id: 693534bbd919a21a08d93aee005c0837 +report_id: 32c8c4ae4a6c254d5608d0dae519a75c version: 0.1 repo_type: Public -timestamp: '2024-02-15T18:43:51+00:00' +timestamp: '2024-02-16T00:20:15+00:00' requested_by: joshk0 provider: github branch: master From 68f9bb690ed29bec2977e78d5ef7dcb4d7e1c608 Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Fri, 16 Feb 2024 00:20:18 +0000 Subject: [PATCH 08/12] Update techstack.md --- techstack.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/techstack.md b/techstack.md index 2f124e3..8c78f7c 100644 --- a/techstack.md +++ b/techstack.md @@ -32,7 +32,7 @@ Full tech stack [here](/techstack.md) # Tech Stack File ![](https://img.stackshare.io/repo.svg "repo") [stackshareio/omniauth-azure-oauth2](https://github.com/stackshareio/omniauth-azure-oauth2)![](https://img.stackshare.io/public_badge.svg "public")

-|7
Tools used|02/15/24
Report generated| +|7
Tools used|02/16/24
Report generated| |------|------|
From e6b98b43e5e956cac70c23d928e3adaf294cf90f Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Fri, 1 Mar 2024 20:35:47 +0000 Subject: [PATCH 09/12] Update techstack.yml --- techstack.yml | 84 ++++++++++++++++++++++++++++++++++++++++++++------- 1 file changed, 73 insertions(+), 11 deletions(-) diff --git a/techstack.yml b/techstack.yml index b1301f0..7b38c89 100644 --- a/techstack.yml +++ b/techstack.yml @@ -1,12 +1,12 @@ repo_name: stackshareio/omniauth-azure-oauth2 -report_id: 32c8c4ae4a6c254d5608d0dae519a75c +report_id: 7be540f18def933b7b5c49bedc81b2e4 version: 0.1 repo_type: Public -timestamp: '2024-02-16T00:20:15+00:00' +timestamp: '2024-03-01T20:35:45+00:00' requested_by: joshk0 provider: github branch: master -detected_tools_count: 7 +detected_tools_count: 10 tools: - name: Ruby description: A dynamic, interpreted, open source programming language with a focus @@ -64,8 +64,8 @@ tools: category: Build, Test, Deploy sub_category: Package Managers image_url: https://img.stackshare.io/service/12795/5jL6-BA5_400x400.jpeg - detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/Gemfile - detection_source: Gemfile + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec last_updated_by: Mark Nadig last_updated_on: 2014-05-30 01:05:17.000000000 Z - name: Travis CI @@ -81,15 +81,77 @@ tools: detection_source: ".travis.yml" last_updated_by: Mark Nadig last_updated_on: 2016-02-16 17:34:29.000000000 Z -- name: Rake - description: A software task management and build automation tool - website_url: https://github.com/ruby/rake +- name: jwt + description: A pure ruby implementation of the RFC 7519 OAuth JSON Web Token + package_url: https://rubygems.org/jwt + version: '1.0' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18991/default_e5e3569d4beb5d51f9ce87c88e8b44a2308e087b.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Mark Nadig + last_updated_on: 2014-05-30 01:05:17.000000000 Z +- name: omniauth + description: A generalized Rack framework for multiple-provider authentication + package_url: https://rubygems.org/omniauth + version: '1.0' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18914/default_aa081534cc9e2d100412a763ab69743f22c56ceb.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Nick Campbell + last_updated_on: 2016-05-18 18:54:44.000000000 Z + vulnerabilities: + - name: OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` + value + cve_id: CVE-2020-36599 + cve_url: https://github.com/advisories/GHSA-pm55-qfxr-h247 + detected_date: Sep 1 + severity: critical + first_patched: 1.9.2 + - name: Omniauth allows POST parameters to be stored in session + cve_id: CVE-2017-18076 + cve_url: https://github.com/advisories/GHSA-9pr6-grf4-x2fr + detected_date: Aug 22 + severity: high + first_patched: 1.3.2 + - name: OmniAuth Ruby gem Cross-site Request Forgery in request phase + cve_id: CVE-2015-9284 + cve_url: https://github.com/advisories/GHSA-ww4x-rwq6-qpgf + detected_date: Aug 22 + severity: high + first_patched: 2.0.0 +- name: omniauth-oauth2 + description: An abstract OAuth2 strategy for OmniAuth + package_url: https://rubygems.org/omniauth-oauth2 + version: '1.4' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18909/default_6011c3e13c0feeff577120981a21a5968e50756a.png + detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec + detection_source: omniauth-azure-oauth2.gemspec + last_updated_by: Nick Campbell + last_updated_on: 2016-05-18 18:54:44.000000000 Z +- name: rake + description: Rake is a Make-like program implemented in Ruby + package_url: https://rubygems.org/rake license: MIT open_source: true hosted_saas: false - category: Application Utilities - sub_category: Task Management - image_url: https://ucarecdn.com/79629173-de2d-4cdf-8509-6d1411b382e7/ + category: Libraries + sub_category: RubyGems Packages + image_url: https://img.stackshare.io/package/18812/default_f582e4648f4682adb72d2b201218cda7f8e894ac.png detection_source_url: https://github.com/stackshareio/omniauth-azure-oauth2/blob/master/omniauth-azure-oauth2.gemspec detection_source: omniauth-azure-oauth2.gemspec last_updated_by: Mark Nadig From 24cee1cc56ff37522b04fae1aea99303f4cd9d1d Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Fri, 1 Mar 2024 20:35:48 +0000 Subject: [PATCH 10/12] Update techstack.md --- techstack.md | 25 +++++++++++-------------- 1 file changed, 11 insertions(+), 14 deletions(-) diff --git a/techstack.md b/techstack.md index 8c78f7c..8a1c2a6 100644 --- a/techstack.md +++ b/techstack.md @@ -7,7 +7,6 @@ stackshareio/omniauth-azure-oauth2 is built on the following main stack: - [Sinatra](http://www.sinatrarb.com/) – Microframeworks (Backend) - [RSpec](https://rspec.info/) – Testing Frameworks - [Travis CI](http://travis-ci.com/) – Continuous Integration -- [Rake](https://github.com/ruby/rake) – Task Management Full tech stack [here](/techstack.md) @@ -21,7 +20,6 @@ stackshareio/omniauth-azure-oauth2 is built on the following main stack: - Sinatra [Sinatra](http://www.sinatrarb.com/) – Microframeworks (Backend) - RSpec [RSpec](https://rspec.info/) – Testing Frameworks - Travis CI [Travis CI](http://travis-ci.com/) – Continuous Integration -- Rake [Rake](https://github.com/ruby/rake) – Task Management Full tech stack [here](/techstack.md) @@ -32,7 +30,7 @@ Full tech stack [here](/techstack.md) # Tech Stack File ![](https://img.stackshare.io/repo.svg "repo") [stackshareio/omniauth-azure-oauth2](https://github.com/stackshareio/omniauth-azure-oauth2)![](https://img.stackshare.io/public_badge.svg "public")

-|7
Tools used|02/16/24
Report generated| +|10
Tools used|03/01/24
Report generated| |------|------| @@ -99,18 +97,17 @@ Full tech stack [here](/techstack.md) -## Other (1) - - - -
- Rake -
- Rake -
- -
+## Open source packages (4) + +## RubyGems (4) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[jwt](https://rubygems.org/jwt)|v1.0|05/30/14|Mark Nadig |MIT|N/A| +|[omniauth](https://rubygems.org/omniauth)|v1.0|05/18/16|Nick Campbell |MIT|[CVE-2020-36599](https://github.com/advisories/GHSA-pm55-qfxr-h247) (Critical)
[CVE-2017-18076](https://github.com/advisories/GHSA-9pr6-grf4-x2fr) (High)
[CVE-2015-9284](https://github.com/advisories/GHSA-ww4x-rwq6-qpgf) (High)| +|[omniauth-oauth2](https://rubygems.org/omniauth-oauth2)|v1.4|05/18/16|Nick Campbell |MIT|N/A| +|[rake](https://rubygems.org/rake)|N/A|05/30/14|Mark Nadig |MIT|N/A|
From 9768676a200497974f9fb26cfc50662057ed863b Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Fri, 1 Mar 2024 20:36:18 +0000 Subject: [PATCH 11/12] Update techstack.yml --- techstack.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/techstack.yml b/techstack.yml index 7b38c89..f54fe0e 100644 --- a/techstack.yml +++ b/techstack.yml @@ -2,7 +2,7 @@ repo_name: stackshareio/omniauth-azure-oauth2 report_id: 7be540f18def933b7b5c49bedc81b2e4 version: 0.1 repo_type: Public -timestamp: '2024-03-01T20:35:45+00:00' +timestamp: '2024-03-01T20:36:16+00:00' requested_by: joshk0 provider: github branch: master From bcd62a7d180b3403d440bf993395a0f2547e579a Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Fri, 1 Mar 2024 20:36:19 +0000 Subject: [PATCH 12/12] Update techstack.md