Ruby-SAML vulnerabilitiesRanked by how likely they are to be used.
Ruby-SAML is made by Onelogin. We track 7 published vulnerabilities in it, across 68 versions. None of them is on the list of flaws known to be exploited today. If you run Ruby-SAML, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Ruby-SAML vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Ruby-SAML's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Ruby-SAML flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 65%CVE-2025-25292Critical
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.
- 21%CVE-2025-25291Critical
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.
- 11%CVE-2024-45409Critical
The Ruby SAML library is for implementing the client side of a SAML authorization.
- 2.5%CVE-2017-11428Critical
OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the...
- 1.5%CVE-2025-25293High
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.
- 1.3%CVE-2015-20108Critical
xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.
- 1.2%CVE-2016-5697High
Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.
Running Ruby-SAML? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.
- Matched to
- Ruby-SAML on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 7 published vulnerabilities listed under the name Ruby-SAML, across 68 versions.
None of Ruby-SAML's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Ruby-SAML. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.