RubyGems/ruby-saml

Ruby-saml allows attackers to perform XML signature wrapping attacks

Modified: 2/16/2024

Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)

Modified: 2/4/2026

Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)

Modified: 2/4/2026

Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses

Modified: 2/4/2026

Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)

Modified: 2/4/2026

SAML authentication bypass via Incorrect XPath selector

Modified: 8/7/2026

ruby-saml vulnerable to XPath injection

Modified: 1/14/2025

Ruby SAML DOS vulnerability with large SAML response

Modified: 9/10/2026

Ruby-SAML Improper Authentication vulnerability

Modified: 11/8/2023

Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation

Modified: 12/12/2025