Vulnerabilities

TI-2025-18946 CVE-2025-25292 · GHSA-754f-8gm6-c4r2

Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)

HIGH 84

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.65086 Published 2025-03-12 Fixed in 1.12.4, 1.18.0 CWE-347

TI-2025-18945 CVE-2025-25291 · GHSA-4vc4-m8qh-g8jm

ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)

HIGH 81

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.20965 Published 2025-03-12 Fixed in 1.12.4, 1.18.0 CWE-347

TI-2025-18947 CVE-2025-25293 · GHSA-92rq-c8cf-prrq

ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

MEDIUM 43

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.01528 Published 2025-03-12 Fixed in 1.12.4, 1.18.0 CWE-400

TI-2024-30458 CVE-2024-45409 · GHSA-jw9c-mfg7-9rx2

The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

HIGH 82

The Ruby SAML library is for implementing the client side of a SAML authorization.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.10684 Published 2024-09-10 Fixed in 1.12.3, 1.17.0 CWE-347

TI-2017-08455 CVE-2017-11430 · GHSA-94hm-8q65-rmxm

Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

MEDIUM 47

OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02435 Published 2019-04-17 Fixed in 1.9.0, 1.10.0 CWE-287

Vulnerabilities

Filters

Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)

ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)

ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal