8 known security vulnerabilities
- criticalGHSA-4vc4-m8qh-g8jm(BIT-gitlab-2025-25291, CVE-2025-25291)
Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)
Show 7 more vulnerabilitiesShow fewer vulnerabilities4 critical2 high1 moderate
- criticalGHSA-754f-8gm6-c4r2(BIT-gitlab-2025-25292, CVE-2025-25292)
Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)
- criticalGHSA-9v8j-x534-2fx3(CVE-2025-66567)
Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
- criticalGHSA-jw9c-mfg7-9rx2(BIT-gitlab-2024-45409, CVE-2024-45409)
SAML authentication bypass via Incorrect XPath selector
- criticalGHSA-x4h9-gwv3-r4m4(CVE-2025-66568)
Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation
- highGHSA-92rq-c8cf-prrq(BIT-gitlab-2025-25293, CVE-2025-25293)
Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses
- highGHSA-x2fr-v8wf-8wwv(CVE-2017-11428)
Ruby-SAML Improper Authentication vulnerability
- moderateGHSA-rrqh-93c8-j966(CVE-2025-54572)
Ruby SAML DOS vulnerability with large SAML response
SAML toolkit for Ruby on Rails
Required Ruby Version
>= 1.8.7
Authors
OneLogin LLC
Versions
-
1.18.1
-
source
- 1.18.1 source July 29, 2025 (77.5 KB)
-
-
1.18.0
-
source
- 1.18.0 source March 12, 2025 (77 KB) vulnerable
-
-
1.17.0
-
source
- 1.17.0 source September 10, 2024 (75 KB) critically vulnerable
-
-
1.16.0
-
source
- 1.16.0 source October 09, 2023 (73 KB) critically vulnerable
-
-
1.15.0
-
source
- 1.15.0 source January 04, 2023 (73 KB) critically vulnerable
-
-
1.3.1
-
source
- 1.3.1 source July 10, 2016 (226 KB) critically vulnerable
-