Skip to content

Commit 240ca27

Browse files
jasnowRubySec CI
authored andcommitted
Updated advisory posts against rubysec/ruby-advisory-db@99b6a95
1 parent 8f7b95a commit 240ca27

5 files changed

Lines changed: 8 additions & 0 deletions

File tree

advisories/_posts/2023-04-20-CVE-2023-30614.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,5 +34,6 @@ advisory:
3434
- https://nvd.nist.gov/vuln/detail/CVE-2023-30614
3535
- https://github.com/pay-rails/pay/commit/5d6283a24062bd272a524ec48415f536a67ad57f
3636
- https://github.com/pay-rails/pay/commit/c067771d8c7514acde4b948b474caf054bb0e25d
37+
- https://securitylab.github.com/advisories/GHSL-2023-084_Pay
3738
- https://github.com/advisories/GHSA-cqf3-vpx7-rxhw
3839
---

advisories/_posts/2025-03-12-CVE-2025-25291.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,5 +38,6 @@ advisory:
3838
- https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials
3939
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4
4040
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0
41+
- https://securitylab.github.com/advisories/GHSL-2024-329_GHSL-2024-330_ruby-saml
4142
- https://github.com/advisories/GHSA-4vc4-m8qh-g8jm
4243
---

advisories/_posts/2025-03-12-CVE-2025-25292.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,5 +38,6 @@ advisory:
3838
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0
3939
- https://nvd.nist.gov/vuln/detail/CVE-2025-25292
4040
- https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials
41+
- https://securitylab.github.com/advisories/GHSL-2024-329_GHSL-2024-330_ruby-saml
4142
- https://github.com/advisories/GHSA-754f-8gm6-c4r2
4243
---

advisories/_posts/2025-03-12-CVE-2025-25293.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,5 +38,6 @@ advisory:
3838
- https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials
3939
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4
4040
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0
41+
- https://securitylab.github.com/advisories/GHSL-2024-355_ruby-saml
4142
- https://github.com/advisories/GHSA-92rq-c8cf-prrq
4243
---

advisories/_posts/2025-03-12-GHSA-hw46-3hmr-x9xv.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,12 +28,16 @@ advisory:
2828
- "~> 2.1.3"
2929
- ">= 2.2.3"
3030
related:
31+
cve:
32+
- 2025-25291
33+
- 2025-25292
3134
url:
3235
- https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv
3336
- https://github.com/omniauth/omniauth-saml/commit/0d5eaa0d808acb2ac96deadf5c750ac1cf2d92b5
3437
- https://github.com/omniauth/omniauth-saml/commit/2c8a482801808bbcb0188214bde74680b8018a35
3538
- https://github.com/omniauth/omniauth-saml/commit/7a348b49083462a566af41a5ae85e9f3af15b985
3639
- https://github.com/omniauth/omniauth-saml/blob/master/omniauth-saml.gemspec#L16
3740
- https://rubygems.org/gems/omniauth-saml/versions/2.2.3
41+
- https://securitylab.github.com/advisories/GHSL-2024-329_GHSL-2024-330_ruby-saml
3842
- https://github.com/advisories/GHSA-hw46-3hmr-x9xv
3943
---

0 commit comments

Comments
 (0)