What’s Vulnerable › Products

OmniAuth OmnitAuth-SAML vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your OmniAuth OmnitAuth-SAML version is affected

Latest OmniAuth OmnitAuth-SAML vulnerabilities

• CVE-2025-25293 — ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses (CVSS 7.5)
• CVE-2025-25292 — Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.8)
• CVE-2025-25291 — ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (CVSS 9.8)
• CVE-2024-45409 — The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector (CVSS 9.8)
• CVE-2017-11430 — Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal (CVSS 9.8)