{"cve":"CVE-2025-54572","nvd":{"published":"2025-07-30T14:15:29.433","modified":"2026-06-17T09:40:19.947","status":"Deferred","description":"The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the message_max_bytesize setting configured. The vulnerability occurs because the SAML response is validated for Base64 format prior to checking the message size, leading to potential resource exhaustion. This is fixed in version 1.18.1.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","score":6.9},"cvss_v3":null,"cwes":["CWE-400","CWE-770"],"references":["https://github.com/SAML-Toolkits/ruby-saml/commit/38ef5dd1ce17514e202431f569c4f5633e6c2709","https://github.com/SAML-Toolkits/ruby-saml/pull/770","https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.1","https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-rrqh-93c8-j966","https://lists.debian.org/debian-lts-announce/2025/09/msg00001.html"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:05:46.678065081+00:00"},"epss":{"cve":"CVE-2025-54572","score":0.0046,"percentile":0.39832,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-rrqh-93c8-j966","url":"https://osv.dev/vulnerability/GHSA-rrqh-93c8-j966","summary":"Ruby SAML DOS vulnerability with large SAML response","modified":"2026-09-10T03:50:26.252859842Z","packages":[{"ecosystem":"RubyGems","name":"ruby-saml","purl":"pkg:gem/ruby-saml","ranges":["<1.18.1"],"fixed":["1.18.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}