Skip to content
OpenAdvisories

Package · Debian

ruby-saml

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2025-25293

    ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

    ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML …

    SAML-Toolkits ruby-saml ruby-saml ruby-saml Debian Ubuntu RubyGems
  • High 7.7
    CVE-2017-11428

    Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

    OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attac…

    OneLogin Ruby-SAML ruby-saml ruby-saml Debian Ubuntu RubyGems
  • High 7.5
    CVE-2016-5697

    Ruby-saml allows attackers to perform XML signature wrapping attacks

    Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.

    ruby-saml ruby-saml ruby-saml Debian Ubuntu RubyGems