omniauth-facebook Gem for Ruby Insecure Access Token Handling Authentication Bypass

We're waiting for CVE assignment still.

http://seclists.org/oss-sec/2013/q4/315