onelogin has 2 CVEs on record. The median CVSS is 9.1 (critical), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- ruby-saml 2
2
Total CVEs
2
Critical
0
CISA KEV
0
Exploited
onelogin vulnerabilities
CVEs affecting onelogin, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2025-66568Critical· 9.1The ruby-saml library implements the client side of an SAML authorization
The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vulnerable to authentication bypass through the libxml2 canonicalization process used by Nokogiri for document transforma…
▾ Midnightonelogin · ruby-samlEPSS 0.24%via NVD
CVE-2025-66567Critical· 9.1The ruby-saml library is for implementing the client side of a SAML authorization
The ruby-saml library is for implementing the client side of a SAML authorization. ruby-saml versions up to and including 1.12.4 contain an authentication bypass vulnerability due to an incomplete fix for CVE-2025-25292. ReXML and Nokogi…
▾ Midnightonelogin · ruby-samlEPSS 0.39%via NVD