Skip to content
OpenAdvisories
Medium DLA-4288-1 1 CVE

ruby-saml - security update

Published Sep 1, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 ruby-saml 1.11.0-1+deb11u3

Vulnerabilities 1

  • Medium 6.9
    CVE-2025-54572

    Ruby SAML DOS vulnerability with large SAML response

    The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the message_max_bytesize setting configured. The vulnerability occurs because the …

    SAML-Toolkits ruby-saml ruby-saml ruby-saml Debian Ubuntu RubyGems