SA
Vendor
SAML-Toolkits
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-66568 | RU ruby-saml SAML-Toolkits | 9.1 | Dec 9 | ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation |
| CVE-2025-66567 | RU ruby-saml SAML-Toolkits | 9.1 | Dec 9 | ruby-saml has a SAML authentication bypass due to namespace handling (parser differential) |
| CVE-2025-54572 | RU ruby-saml SAML-Toolkits | 6.9 | Jul 30 | Ruby SAML DOS vulnerability with large SAML response |
| CVE-2025-25292 | RU ruby-saml SAML-Toolkits | 9.8 | Mar 12 | Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) |
| CVE-2025-25291 | RU ruby-saml SAML-Toolkits | 9.8 | Mar 12 | ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) |
| CVE-2025-25293 | RU ruby-saml SAML-Toolkits | 7.5 | Mar 12 | ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses |
| CVE-2024-45409 | RU ruby-saml SAML-Toolkits | 9.8 | Sep 10 | The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector |