[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYM8EmgmKr28MIiFupzGGfRg3wvjjPzNuWK9zhNAkUfE":3,"g5a-ex:omniauth\u002Fomniauth_saml@*":170,"g5a-family:omniauth\u002Fomniauth_saml":172},{"success":4,"data":5},true,{"product":6,"versions":83,"topVulnerabilitiesByEpss":117,"kevVulnerabilities":147,"seoMetadata":148,"meta":167},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":82},"omniauth","omniauth_saml",33,5,0,"2025-03-12",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,66,68,70,72,74,76,78,80],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.1",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.3",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.4",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.5",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.6",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.1",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.2",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.1",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.0",{"version":64,"cve_count":65,"kev_count":11,"has_kev":16},"2.0.0",1,{"version":67,"cve_count":65,"kev_count":11,"has_kev":16},"2.1.0",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2",{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.3",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.2",{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.3","Omniauth Saml by Omniauth is a technology product with 33 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":65,"kev_count":11,"has_kev":16},{"version":67,"cve_count":65,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},[118,125,129,135,141],{"cveId":119,"description":120,"publishedDate":12,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":16,"epssScore":124},"CVE-2025-25292","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.",9.8,"v3.1","Critical",0.65086,{"cveId":126,"description":127,"publishedDate":12,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":16,"epssScore":128},"CVE-2025-25291","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue.",0.20965,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":122,"severity":123,"isKev":16,"epssScore":134},"CVE-2024-45409","The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in \u003C= 12.2 and 1.13.0 \u003C= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response\u002FAssertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.","2024-09-10",10,0.10684,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":121,"cvssVersion":139,"severity":123,"isKev":16,"epssScore":140},"CVE-2017-11430","OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.","2019-04-17","v3.0",0.02435,{"cveId":142,"description":143,"publishedDate":12,"cvssScore":144,"cvssVersion":122,"severity":145,"isKev":16,"epssScore":146},"CVE-2025-25293","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.",7.5,"High",0.01528,[],{"title":149,"metaDescription":150,"keywords":151,"structuredData":152},"Omniauth Saml by Omniauth - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Omniauth Saml by Omniauth covering 33 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Omniauth Saml vulnerabilities, Omniauth Saml security, Omniauth Saml CVE, Omniauth Omniauth Saml, Omniauth Saml threat intelligence, Omniauth security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":153,"@type":154,"name":155,"description":150,"url":156,"manufacturer":157,"applicationCategory":161,"softwareVersion":162,"mainEntity":163},"https:\u002F\u002Fschema.org","SoftwareApplication","Omniauth Saml","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fomniauth\u002Fomniauth_saml",{"@type":158,"name":159,"url":160},"Organization","Omniauth","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fomniauth","Security Software","33 versions tracked",{"@type":164,"name":165,"description":166,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Omniauth Saml Security Vulnerabilities","Security vulnerabilities affecting Omniauth Saml by Omniauth",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":168,"apiVersion":169},"2026-10-18T20:38:06.938Z","3.0",{"rows":171,"total":11,"capped":16,"failed":11},[],[]]