https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:11:01.417364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07261 bdu:2024-07261 2026-10-03T18:11:01.555921+00:00 bdu:2024-07261 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-45409 BIT-gitlab-2024-45409 — The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector 2026-10-03T18:11:01.555997+00:00

Affected: Bitnami: gitlab

The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0791 certfr-2024-avi-0791 — Une vulnérabilité a été découverte dans GitLab. Elle permet à un attaquant de provoquer un contournement de la politiqu… 2026-10-03T18:11:01.556073+00:00 certfr-2024-avi-0791 https://cve.radiocsirt.org/vuln/euvd-2026-200631 EUVD-2026-200631 2026-10-03T18:11:01.556108+00:00 EUVD-2026-200631 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45409 fkie_cve-2024-45409 2026-10-03T18:11:01.556127+00:00

The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.

 https://cve.radiocsirt.org/vuln/ghsa-jw9c-mfg7-9rx2 GHSA-jw9c-mfg7-9rx2 — SAML authentication bypass via Incorrect XPath selector 2026-10-03T18:11:01.556166+00:00

Affected: RubyGems: ruby-saml

Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system.

This vulnerability was reported by ahacker1 of SecureSAML (ahacker1@securesaml.com)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45409 UBUNTU-CVE-2024-45409 2026-10-03T18:11:01.556207+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby-saml, Ubuntu:Pro:18.04:LTS: ruby-saml, Ubuntu:20.04:LTS: ruby-saml, Ubuntu:22.04:LTS: ruby-saml, Ubuntu:24.04:LTS: ruby-saml

The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2162 WID-SEC-W-2024-2162 — GitLab: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T18:11:01.556261+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GitLab und Ruby ausnutzen, um Sicherheitsvorkehrungen zu umgehen.