https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:10:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03642 bdu:2025-03642 https://cve.radiocsirt.org/vuln/bdu:2025-03642 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-25293 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-25293 https://cve.radiocsirt.org/vuln/euvd-2026-257815 EUVD-2026-257815 https://cve.radiocsirt.org/vuln/euvd-2026-257815 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25293 <p>ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.</p> <p>ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25293 https://cve.radiocsirt.org/vuln/ghsa-92rq-c8cf-prrq <p><strong>Affected:</strong> RubyGems: ruby-saml</p> <p>### Summary ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses.</p> <p>Ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after.</p> <p>### Impact This issue may lead to remote Denial of Service (DoS).</p> <p><strong>Affected:</strong> RubyGems: ruby-saml</p> <p>### Summary ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses.</p> <p>Ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after.</p> <p>### Impact This issue may lead to remote Denial of Service (DoS).</p> https://cve.radiocsirt.org/vuln/ghsa-92rq-c8cf-prrq https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25293 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ruby-saml, Ubuntu:Pro:18.04:LTS: ruby-saml, Ubuntu:Pro:20.04:LTS: ruby-saml, Ubuntu:Pro:22.04:LTS: ruby-saml, Ubuntu:Pro:24.04:LTS: ruby-saml</p> <p>ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ruby-saml, Ubuntu:Pro:18.04:LTS: ruby-saml, Ubuntu:Pro:20.04:LTS: ruby-saml, Ubuntu:Pro:22.04:LTS: ruby-saml, Ubuntu:Pro:24.04:LTS: ruby-saml</p> <p>ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they&#39;re compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25293 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0561 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby SAML ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby SAML ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0561