Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Ruby-SAML — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Ruby-SAML, with AI-generated Chinese analysis, references, and POCs.

Vendor: OneLogin

CVE IDTitleCVSSSeverityPublished
CVE-2025-66568 ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation CWE-347 7.4AIHighAI2025-12-09
CVE-2025-66567 ruby-saml has a SAML authentication bypass due to namespace handling (parser differential) CWE-347 9.1AICriticalAI2025-12-09
CVE-2025-54572 Ruby SAML DOS vulnerability with large SAML response CWE-400 7.5AIHighAI2025-07-30
CVE-2025-25292 Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) CWE-347 9.8 -2025-03-12
CVE-2025-25291 ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) CWE-347 9.8 -2025-03-12
CVE-2025-25293 ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses CWE-400 7.5 -2025-03-12
CVE-2024-45409 The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector CWE-347 10.0 Critical2024-09-10
CVE-2017-11428 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal CWE-287 9.8 -2019-04-17

All 8 known CVE vulnerabilities affecting Ruby-SAML with full Chinese analysis, references, and POCs where available.