ruby-saml vulnerabilities
CVEs whose affected-version data names the ruby-saml package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-66568Critical· 9.1The ruby-saml library implements the client side of an SAML authorization
The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vulnerable to authentication bypass through the libxml2 canonicalization process used by Nokogiri for document transforma…
▾ Midnightonelogin · ruby-samlEPSS 0.24%via NVD
CVE-2025-66567Critical· 9.1The ruby-saml library is for implementing the client side of a SAML authorization
The ruby-saml library is for implementing the client side of a SAML authorization. ruby-saml versions up to and including 1.12.4 contain an authentication bypass vulnerability due to an incomplete fix for CVE-2025-25292. ReXML and Nokogi…
▾ Midnightonelogin · ruby-samlEPSS 0.39%via NVD