https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:40:56.640633+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03642 bdu:2025-03642 2026-10-03T12:40:56.720910+00:00 bdu:2025-03642 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-25293 BIT-gitlab-2025-25293 — ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses 2026-10-03T12:40:56.720946+00:00

Affected: Bitnami: gitlab

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-257815 EUVD-2026-257815 2026-10-03T12:40:56.720985+00:00 EUVD-2026-257815 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25293 fkie_cve-2025-25293 2026-10-03T12:40:56.720999+00:00

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.

 https://cve.radiocsirt.org/vuln/ghsa-92rq-c8cf-prrq GHSA-92rq-c8cf-prrq — Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses 2026-10-03T12:40:56.721023+00:00

Affected: RubyGems: ruby-saml

### Summary ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses.

Ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after.

### Impact This issue may lead to remote Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25293 UBUNTU-CVE-2025-25293 2026-10-03T12:40:56.721048+00:00

Affected: Ubuntu:Pro:16.04:LTS: ruby-saml, Ubuntu:Pro:18.04:LTS: ruby-saml, Ubuntu:Pro:20.04:LTS: ruby-saml, Ubuntu:Pro:22.04:LTS: ruby-saml, Ubuntu:Pro:24.04:LTS: ruby-saml

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0561 WID-SEC-W-2025-0561 — Ruby SAML: Mehrere Schwachstellen 2026-10-03T12:40:56.721075+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby SAML ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.