RU
Product
ruby-saml
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 1Medium 1Low 0
Watch
Add ruby-saml to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-25292 | 9.8 | Mar 12 | Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) Affected: < 1.12.4; >= 1.13.0, < 1.18.0 |
| CVE-2025-25291 | 9.8 | Mar 12 | ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) Affected: < 1.12.4; >= 1.13.0, < 1.18.0 |
| CVE-2024-45409 | 9.8 | Sep 10 | The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector Affected: < 1.12.3; >= 1.13.0, < 1.17.0 |
| CVE-2025-66568 | 9.1 | Dec 9 | ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation Affected: < 1.18.0 |
| CVE-2025-66567 | 9.1 | Dec 9 | ruby-saml has a SAML authentication bypass due to namespace handling (parser differential) Affected: < 1.18.0 |
| CVE-2025-25293 | 7.5 | Mar 12 | ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses Affected: < 1.12.4; >= 1.13.0, < 1.18.0 |
| CVE-2025-54572 | 6.9 | Jul 30 | Ruby SAML DOS vulnerability with large SAML response Affected: < 1.18.1 |
Showing 7