intridea/omniauth-github — pull request #42 by testbrian (2014-12-11 07:45:36+00:00)
Title: bump omniauth-oauth2 dependency version (CSRF issue)

http://www.rubysec.com/advisories/CVE-2012-6134/
```
CVE-2012-6134 in omniauth-oauth2
Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.
```