Security Advisories · SAML-Toolkits/ruby-saml · GitHub

Security Advisories

View known security vulnerabilities and report new vulnerabilities privately to maintainers.

Report a vulnerability

DOS with large SAML response
GHSA-rrqh-93c8-j966 published Jul 29, 2025 by pitbulk

Moderate
Remote Denial of Service (DoS) with compressed SAML responses
GHSA-92rq-c8cf-prrq published Mar 12, 2025 by pitbulk

Moderate
SAML authentication bypass due to namespace handling (parser differential)
GHSA-754f-8gm6-c4r2 published Mar 12, 2025 by pitbulk

Critical
SAML authentication bypass due to DOCTYPE handling (parser differential)
GHSA-4vc4-m8qh-g8jm published Mar 12, 2025 by pitbulk

Critical
SAML authentication bypass via Incorrect XPath selector
GHSA-jw9c-mfg7-9rx2 published Sep 10, 2024 by pitbulk

Critical