Skip to content

Remote Denial of Service (DoS) with compressed SAML responses

Moderate
pitbulk published GHSA-92rq-c8cf-prrq Mar 12, 2025

Package

bundler omniauth-saml (RubyGems)

Affected versions

<=2.2.2, <= 1.10.5

Patched versions

2.2.3, 1.10.6
bundler ruby-saml (RubyGems)
<=1.12.3 || >=1.13.0 < 1.18.0
1.18.0, 1.12.4

Description

Summary

ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses.

Ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after.

Impact

This issue may lead to remote Denial of Service (DoS).

Severity

Moderate

CVE ID

CVE-2025-25293

Weaknesses

Credits