https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:14:00 +0000 https://cve.radiocsirt.org/vuln/cve-2017-11428 <p><strong>Affected:</strong> OneLogin Ruby-SAML</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p><strong>Affected:</strong> OneLogin Ruby-SAML</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/cve-2017-11428 https://cve.radiocsirt.org/vuln/ghsa-x2fr-v8wf-8wwv <p><strong>Affected:</strong> RubyGems: ruby-saml</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p><strong>Affected:</strong> RubyGems: ruby-saml</p> <p>OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/ghsa-x2fr-v8wf-8wwv