CVE-2025-25293

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.

• CWE-400

• https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-releasedPatch
• https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentialsExploit, Third Party Advisory
• https://github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349aPatch
• https://github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1Patch
• https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4Release Notes
• https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0Release Notes
• https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrqVendor Advisory
• https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xvVendor Advisory
• https://securitylab.github.com/advisories/GHSL-2024-355_ruby-samlExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/04/msg00011.html
• https://security.netapp.com/advisory/ntap-20250314-0008/Third Party Advisory

Published

Mar 12, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25288@octokit/plugin-paginate-rest is the Octokit plugin to pagin…5.3
• CVE-2025-25289@octokit/request-error is an error class for Octokit request…5.3
• CVE-2025-2529Applications using affected versions of Ehcache 3.x can expe…3.7
• CVE-2025-25290@octokit/request sends parameterized requests to GitHub’s AP…5.3
• CVE-2025-25291ruby-saml provides security assertion markup language (SAML)…9.8
• CVE-2025-25292ruby-saml provides security assertion markup language (SAML)…9.8
• CVE-2025-25294Envoy Gateway is an open source project for managing Envoy P…5.3
• CVE-2025-25295Label Studio is an open source data labeling tool. A path tr…8.7
• CVE-2025-25296Label Studio is an open source data labeling tool. Prior to …6.1
• CVE-2025-25297Label Studio is an open source data labeling tool. Prior to …7.7
• CVE-2025-25298Strapi is an open source headless CMS. The @strapi/core pack…5.3
• CVE-2025-25299CKEditor 5 is a modern JavaScript rich-text editor with an M…2.3