intridea/omniauth-github — pull request #45 by testbrian (2014-12-18 10:50:25+00:00)
Title: omniauth-oauth2 >=1.1.1

http://www.rubysec.com/advisories/CVE-2012-6134/

CVE-2012-6134 in omniauth-oauth2
Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.