[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzGzOYV83PR03T5l6hjUXj9YD6VDp1Q_SxGel7rCzqi0":3,"g5a-ex:onelogin\u002Fruby-saml@*":284,"g5a-family:onelogin\u002Fruby-saml":286},{"success":4,"data":5},true,{"product":6,"versions":152,"topVulnerabilitiesByEpss":221,"kevVulnerabilities":261,"seoMetadata":262,"meta":281},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":151},"onelogin","ruby-saml",68,7,0,"2025-03-12",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.3",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.1",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.2",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.3",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.4",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.3",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.4",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.5",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.6",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.7",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.2",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.3",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.1",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.3",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.1",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.2",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.3",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"0.9",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.2",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.3",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.0",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.1",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.2",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.1",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.0",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.2",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.0",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.1",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.2",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.3",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.4",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.0",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"1.14.0",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"1.15.0",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"1.16.0",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"1.17.0",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"1.18.0",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.1",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.1",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.2",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.3",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.1",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.2",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.2",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.0","Ruby-saml by Onelogin is a technology product with 68 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},[222,229,233,239,245,251,256],{"cveId":223,"description":224,"publishedDate":12,"cvssScore":225,"cvssVersion":226,"severity":227,"isKev":16,"epssScore":228},"CVE-2025-25292","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.",9.8,"v3.1","Critical",0.65086,{"cveId":230,"description":231,"publishedDate":12,"cvssScore":225,"cvssVersion":226,"severity":227,"isKev":16,"epssScore":232},"CVE-2025-25291","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue.",0.20965,{"cveId":234,"description":235,"publishedDate":236,"cvssScore":237,"cvssVersion":226,"severity":227,"isKev":16,"epssScore":238},"CVE-2024-45409","The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in \u003C= 12.2 and 1.13.0 \u003C= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response\u002FAssertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.","2024-09-10",10,0.10684,{"cveId":240,"description":241,"publishedDate":242,"cvssScore":225,"cvssVersion":243,"severity":227,"isKev":16,"epssScore":244},"CVE-2017-11428","OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.","2019-04-17","v3.0",0.02464,{"cveId":246,"description":247,"publishedDate":12,"cvssScore":248,"cvssVersion":226,"severity":249,"isKev":16,"epssScore":250},"CVE-2025-25293","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.",7.5,"High",0.01528,{"cveId":252,"description":253,"publishedDate":254,"cvssScore":225,"cvssVersion":226,"severity":227,"isKev":16,"epssScore":255},"CVE-2015-20108","xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.","2023-05-27",0.01332,{"cveId":257,"description":258,"publishedDate":259,"cvssScore":248,"cvssVersion":243,"severity":249,"isKev":16,"epssScore":260},"CVE-2016-5697","Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.","2017-01-23",0.01208,[],{"title":263,"metaDescription":264,"keywords":265,"structuredData":266},"Ruby-saml by Onelogin - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ruby-saml by Onelogin covering 68 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ruby-saml vulnerabilities, Ruby-saml security, Ruby-saml CVE, Onelogin Ruby-saml, Ruby-saml threat intelligence, Onelogin security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":267,"@type":268,"name":269,"description":264,"url":270,"manufacturer":271,"applicationCategory":275,"softwareVersion":276,"mainEntity":277},"https:\u002F\u002Fschema.org","SoftwareApplication","Ruby-saml","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fonelogin\u002Fruby-saml",{"@type":272,"name":273,"url":274},"Organization","Onelogin","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fonelogin","Security Software","68 versions tracked",{"@type":278,"name":279,"description":280,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ruby-saml Security Vulnerabilities","Security vulnerabilities affecting Ruby-saml by Onelogin",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":282,"apiVersion":283},"2026-10-18T20:37:19.371Z","3.0",{"rows":285,"total":11,"capped":16,"failed":11},[],[]]