OSVDB-124383: XXE vulnerability

June 30, 2015

The gem is vulnerable to external entity expansion attacks.

References

github.com/onelogin/ruby-saml/commit/a2e5318530701bf14528c5b3b51c880b3499a75d
github.com/onelogin/ruby-saml/pull/247

Code Behaviors & Features

Detect and mitigate OSVDB-124383 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →