saml-toolkits/ruby-saml Security Advisories | GitStock

critical2025-12-08

Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation

GHSA-x4h9-gwv3-r4m4 · CVE-2025-66568

critical2025-12-08

Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)

GHSA-9v8j-x534-2fx3 · CVE-2025-66567

medium2025-07-30

Ruby SAML DOS vulnerability with large SAML response

GHSA-rrqh-93c8-j966 · CVE-2025-54572

critical2025-03-12

Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)

GHSA-754f-8gm6-c4r2 · CVE-2025-25292

critical2025-03-12

Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)

GHSA-4vc4-m8qh-g8jm · CVE-2025-25291

high2025-03-12

Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses

GHSA-92rq-c8cf-prrq · CVE-2025-25293

critical2024-09-10

SAML authentication bypass via Incorrect XPath selector

GHSA-jw9c-mfg7-9rx2 · CVE-2024-45409

critical2023-05-27

ruby-saml vulnerable to XPath injection

GHSA-r364-2pj4-pf7f · CVE-2015-20108