NetSight
IP …
high7.5

CVE-2025-25293

Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses

Impact

### Summary ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. Ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. ### Impact This issue may lead to remote Denial of Service (DoS).

Affected packages

EcosystemPackageAffectedFixed in
rubygemsruby-saml< 1.12.41.12.4

Affected products

VendorProductAffected versions
OmniauthOmniauth Saml
before 1.10.6
from 2.0.0 before 2.1.3
from 2.2.0 before 2.2.3
OneloginRuby-Saml
before 1.12.4
from 1.13.0 before 1.18.0

Weakness classification

CWE-400CWE-770

References