SSAML-Toolkits

Products

Exploited and recent CVEs

• CVE-2025-66568 Critical 9.3 ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation 0.2%
• CVE-2025-66567 Critical 9.3 ruby-saml has a SAML authentication bypass due to namespace handling (parser differential) 0.4%
• CVE-2025-54572 Medium 6.9 Ruby SAML DOS vulnerability with large SAML response 0.5%
• CVE-2025-25292 Critical 9.3 Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) 65.1%
• CVE-2025-25291 Critical 9.3 ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) 21.0%
• CVE-2025-25293 High 7.7 ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses 1.5%
• CVE-2024-45409 Critical 10.0 The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector 10.7%