Executive brief
Ruby SAML DOS vulnerability with large SAML response
Affected products
- RubyGems ruby-saml
Junglewise Threat Intelligence
CVE-2025-54572: Ruby SAML DOS vulnerability with large SAML response
CVE-2025-54572 · Severity: medium · CVSS 4 · Published 2025-07-30
Technologies: ruby-saml (RubyGems). Vendors: RubyGems.
Related threats
- Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation
- Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
- ruby-saml vulnerable to XPath injection
- Ruby-SAML Improper Authentication vulnerability
- OneLogin ruby-saml XML signature wrapping attack