GitHub Security Lab on Mythryl: “In this blog post, we detail newly discovered authentication bypass…”

@securitylab.github.com

In this blog post, we detail newly discovered authentication bypass vulnerabilities in the ruby-saml library used for single sign-on (SSO) via SAML on the service provider (application) side. github.blog/security/sig...

github.blogSign in as anyone: Bypassing SAML SSO authentication with parser differentialsCritical authentication bypass vulnerabilities were discovered in ruby-saml up to version 1.17.0. See how they were uncovered.

12/3/25, 9:33 pm6 reposts7 likes

Post