Executive brief
Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation
Affected products
- RubyGems ruby-saml
Junglewise Threat Intelligence
CVE-2025-66568 · Severity: medium · CVSS 4 · Published 2025-12-08
Technologies: ruby-saml (RubyGems). Vendors: RubyGems.
Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation