1 matches found
omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issue
Summary There are 2 new Critical Signature Wrapping Vulnerabilities CVE-2025-25292, CVE-2025-25291 and a potential DDOS Moderated Vulneratiblity CVE-2025-25293 affecting ruby-saml, a dependency of omniauth-saml. The fix will be applied to ruby-saml and released 12 March 2025, under version 1.18.0...
9.8CVSS6.2AI score0.63792EPSS
SaveExploits3References8Affected Software1
20