intridea/omniauth-github — pull request #43 by testbrian (2014-12-17 13:25:45+00:00)
Title: omniauth-oauth2 >=1.1.1

http://www.rubysec.com/advisories/CVE-2012-6134/

CVE-2012-6134 in omniauth-oauth2
Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.