Use this section to tell people about which versions of your project are currently being supported with security updates.
| Version | Supported |
|---|---|
| 2.1.x | ✅ |
| < 2.1.x | ❌ |
You can report a vulnerability via https://github.com/omniauth/omniauth-saml/security.
Security: omniauth/omniauth-saml
Security
SECURITY.md
-
Signature Wrapping Attack issue on ruby-samlGHSA-hw46-3hmr-x9xv published
Mar 12, 2025 by bufferoverflowCritical -
Bad documentation for idp_cert_fingerprint_validatorGHSA-cgp2-2cmh-pf7x published
May 27, 2025 by bufferoverflowLow -
Improper Verification of Cryptographic Signature in omniauth-samlGHSA-cvp8-5r8g-fhvq published
Sep 11, 2024 by bufferoverflowCritical
Learn more about advisories related to omniauth/omniauth-saml in the GitHub Advisory Database