We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 24b69b5 commit c5f02ffCopy full SHA for c5f02ff
changelog.md
@@ -1,4 +1,7 @@
1
# RubySaml Changelog
2
+### 1.12.4 (Mar 12, 2025)
3
+* Fix vulnerabilities: CVE-2025-25291, CVE-2025-25292: SAML authentication bypass via Signature Wrapping attack allowed due parser differential.
4
+* Fix vulnerability: CVE-2025-25293: Potential DOS abusing of compressed messages.
5
6
### 1.12.3 (Sep 10, 2024)
7
* Fix for critical vulnerability CVE-2024-45409: SAML authentication bypass via Incorrect XPath selector
lib/onelogin/ruby-saml/version.rb
@@ -1,5 +1,13 @@
module OneLogin
module RubySaml
+<<<<<<< Updated upstream
VERSION = '1.12.3'
+=======
+ VERSION = '1.12.0'
8
9
+ VERSION = '1.12.4'
10
+>>>>>>> Stashed changes
11
12
end
13
0 commit comments