rubysec/ruby-advisory-db — pull request #120 by derekprior (2014-12-18 14:31:14+00:00)
Title: Revert "Correct patched versions for omniauth-oauth2"

After manual inspection of 1.1.1, I can confirm the CSRF fix is indeed present in 1.1.1. I have asked the maintainers to update the CVE.