What’s Vulnerable › Products

SAML-Toolkits ruby-saml vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your SAML-Toolkits ruby-saml version is affected

Latest SAML-Toolkits ruby-saml vulnerabilities

• CVE-2025-66568 — ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation (CVSS 9.1)
• CVE-2025-66567 — ruby-saml has a SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.1)
• CVE-2025-54572 — Ruby SAML DOS vulnerability with large SAML response (CVSS 6.9)
• CVE-2025-25293 — ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses (CVSS 7.5)
• CVE-2025-25292 — Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.8)
• CVE-2025-25291 — ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (CVSS 9.8)
• CVE-2024-45409 — The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector (CVSS 9.8)
• CVE-2015-20108 — (CVSS 9.8)
• CVE-2017-11428 — Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal (CVSS 9.8)
• CVE-2016-5697 — (CVSS 7.5)