GHSA-9v8j-x534-2fx3

Suggest an improvement
Source
https://github.com/advisories/GHSA-9v8j-x534-2fx3
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/12/GHSA-9v8j-x534-2fx3/GHSA-9v8j-x534-2fx3.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-9v8j-x534-2fx3
Aliases
Related
Published
2025-12-08T21:30:56Z
Modified
2025-12-09T19:52:11.083203Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
Details

Summary

Ruby-saml up to and including 1.12.4, there is an authentication bypass vulnerability because of an incomplete fix for CVE-2025-25292. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. The vulnerability does not affect the version 1.18.0.

Impact

That allows an attacker to be able to execute a Signature Wrapping attack and bypass the authentication

Database specific 
{
    "cwe_ids": [
        "CWE-347"
    ],
    "github_reviewed_at": "2025-12-08T21:30:56Z",
    "severity": "CRITICAL",
    "nvd_published_at": "2025-12-09T16:18:21Z",
    "github_reviewed": true
}
References

Affected packages

RubyGems / ruby-saml

Package

Name
ruby-saml
Purl
pkg:gem/ruby-saml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.18.0

Affected versions

0.*

0.0.5
0.0.6
0.0.7
0.0.8
0.2.1
0.2.2
0.2.3
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.5.0
0.5.1
0.5.2
0.5.3
0.6.0
0.7.0
0.7.1
0.7.2
0.7.3
0.8.0
0.8.1
0.8.2
0.8.3
0.8.4
0.8.5
0.8.6
0.8.7
0.8.8
0.8.9
0.8.10
0.8.11
0.8.12
0.8.13
0.8.14
0.8.15
0.8.16
0.8.17
0.8.18
0.9
0.9.1
0.9.2
0.9.3
0.9.4

1.*

1.0.0
1.1.0
1.1.1
1.1.2
1.2.0
1.3.0
1.3.1
1.4.0
1.4.1
1.4.2
1.4.3
1.5.0
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.8.0
1.9.0
1.10.0
1.10.1
1.10.2
1.11.0
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.14.0
1.15.0
1.16.0
1.17.0