https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:31:50 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-15985 cnvd-2019-15985 https://cve.radiocsirt.org/vuln/cnvd-2019-15985 https://cve.radiocsirt.org/vuln/euvd-2026-76699 EUVD-2026-76699 https://cve.radiocsirt.org/vuln/euvd-2026-76699 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11428 <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-11428 https://cve.radiocsirt.org/vuln/ghsa-x2fr-v8wf-8wwv <p><strong>Affected:</strong> RubyGems: ruby-saml</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p><strong>Affected:</strong> RubyGems: ruby-saml</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/ghsa-x2fr-v8wf-8wwv https://cve.radiocsirt.org/vuln/gsd-2017-11428 gsd-2017-11428 https://cve.radiocsirt.org/vuln/gsd-2017-11428 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11428 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ruby-saml</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ruby-saml</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11428