Lucene search
+L

Denial Of Service (DoS)

🗓️ 13 Aug 2025 10:32:09Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 5 Views

ruby-saml DoS risk: validation order; Base64 validated before size, causing resource exhaustion

Related
Detection
Refs
Vulners
Node
OR
oneloginruby-samlRange0.0.51.18.0ruby
oneloginruby-samlMatch0.0.5ruby
oneloginruby-samlMatch0.0.6ruby
oneloginruby-samlMatch0.0.7ruby
oneloginruby-samlMatch0.0.8ruby
oneloginruby-samlMatch0.2.1ruby
oneloginruby-samlMatch0.2.2ruby
oneloginruby-samlMatch0.2.3ruby
oneloginruby-samlMatch0.3.0ruby
oneloginruby-samlMatch0.3.1ruby
oneloginruby-samlMatch0.3.2ruby
oneloginruby-samlMatch0.3.3ruby
oneloginruby-samlMatch0.3.4ruby
oneloginruby-samlMatch0.4.0ruby
oneloginruby-samlMatch0.4.1ruby
oneloginruby-samlMatch0.4.2ruby
oneloginruby-samlMatch0.4.3ruby
oneloginruby-samlMatch0.4.4ruby
oneloginruby-samlMatch0.4.5ruby
oneloginruby-samlMatch0.4.6ruby
oneloginruby-samlMatch0.4.7ruby
oneloginruby-samlMatch0.5.0ruby
oneloginruby-samlMatch0.5.1ruby
oneloginruby-samlMatch0.5.2ruby
oneloginruby-samlMatch0.5.3ruby
oneloginruby-samlMatch0.6.0ruby
oneloginruby-samlMatch0.7.0ruby
oneloginruby-samlMatch0.7.1ruby
oneloginruby-samlMatch0.7.2ruby
oneloginruby-samlMatch0.7.3ruby
oneloginruby-samlMatch0.8.0ruby
oneloginruby-samlMatch0.8.1ruby
oneloginruby-samlMatch0.8.10ruby
oneloginruby-samlMatch0.8.11ruby
oneloginruby-samlMatch0.8.12ruby
oneloginruby-samlMatch0.8.13ruby
oneloginruby-samlMatch0.8.14ruby
oneloginruby-samlMatch0.8.15ruby
oneloginruby-samlMatch0.8.16ruby
oneloginruby-samlMatch0.8.17ruby
oneloginruby-samlMatch0.8.18ruby
oneloginruby-samlMatch0.8.2ruby
oneloginruby-samlMatch0.8.3ruby
oneloginruby-samlMatch0.8.4ruby
oneloginruby-samlMatch0.8.5ruby
oneloginruby-samlMatch0.8.6ruby
oneloginruby-samlMatch0.8.7ruby
oneloginruby-samlMatch0.8.8ruby
oneloginruby-samlMatch0.8.9ruby
oneloginruby-samlMatch0.9ruby
oneloginruby-samlMatch0.9.1ruby
oneloginruby-samlMatch0.9.2ruby
oneloginruby-samlMatch0.9.3ruby
oneloginruby-samlMatch0.9.4ruby
oneloginruby-samlMatch1.0.0ruby
oneloginruby-samlMatch1.1.0ruby
oneloginruby-samlMatch1.1.1ruby
oneloginruby-samlMatch1.1.2ruby
oneloginruby-samlMatch1.10.0ruby
oneloginruby-samlMatch1.10.1ruby
oneloginruby-samlMatch1.10.2ruby
oneloginruby-samlMatch1.11.0ruby
oneloginruby-samlMatch1.12.0ruby
oneloginruby-samlMatch1.12.1ruby
oneloginruby-samlMatch1.12.2ruby
oneloginruby-samlMatch1.12.3ruby
oneloginruby-samlMatch1.12.4ruby
oneloginruby-samlMatch1.13.0ruby
oneloginruby-samlMatch1.14.0ruby
oneloginruby-samlMatch1.15.0ruby
oneloginruby-samlMatch1.16.0ruby
oneloginruby-samlMatch1.17.0ruby
oneloginruby-samlMatch1.2.0ruby
oneloginruby-samlMatch1.3.0ruby
oneloginruby-samlMatch1.3.1ruby
oneloginruby-samlMatch1.4.0ruby
oneloginruby-samlMatch1.4.1ruby
oneloginruby-samlMatch1.4.2ruby
oneloginruby-samlMatch1.4.3ruby
oneloginruby-samlMatch1.5.0ruby
oneloginruby-samlMatch1.6.0ruby
oneloginruby-samlMatch1.6.1ruby
oneloginruby-samlMatch1.6.2ruby
oneloginruby-samlMatch1.7.0ruby
oneloginruby-samlMatch1.7.1ruby
oneloginruby-samlMatch1.7.2ruby
oneloginruby-samlMatch1.8.0ruby
oneloginruby-samlMatch1.9.0ruby

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 08:08Current
7.1High risk
Vulners AI Score7.1
CVSS 46.9
EPSS0.00384
SSVC
5