Drupal OpenID Module “claimed_id” Authority Spoofing

Application: Drupal OpenID Module
Affected Version: 5.x-1.0 and earlier.
Vendor’s URL: http://drupal.org/project/openid
Bug Type: Spoofing
Risk Level: Critical

Solution:
Update to OpenID 5.x-1.1.