CVE-2025-25293 — ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

Affected: SAML-Toolkits ruby-saml

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.

USN-7409-1 — ruby-saml vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: ruby-saml, Ubuntu:Pro:18.04:LTS: ruby-saml, Ubuntu:Pro:20.04:LTS: ruby-saml, Ubuntu:Pro:22.04:LTS: ruby-saml, Ubuntu:Pro:24.04:LTS: ruby-saml

It was discovered that ruby-saml did not correctly handle XML parsing. An attacker could possibly use this issue to perform a signature wrapping attack and bypass authentication. (CVE-2025-25291 and CVE-2025-25292)

It was discovered that ruby-saml did not correctly handle decompressing SAML responses. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-25293)

Most recent entries from all

CVE-2025-25293 — ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

USN-7409-1 — ruby-saml vulnerabilities