Search results

OneLogin::RubySaml::Response is broken on rexml 3.3.9

Status: Open.

#729 In SAML-Toolkits/ruby-saml;

· msxavi opened on Nov 5, 2024

CVE-2024-45409 - SAML authentication bypass via Incorrect XPath selector

security

Status: Open.

#721 In SAML-Toolkits/ruby-saml;

· pitbulk opened on Sep 10, 2024

want_assertions_encrypted should add a validation to require IdP encryption

Status: Open.

#714 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 15, 2024

idp_cert_multi should accept an array of PEM strings (and array of X509 objects)

Status: Open.

#713 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 14, 2024

v3.0 - Fix REXML::Security.entity_expansion_limit global mutation

Status: Open.

#707 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 10, 2024

RubySaml 2.0 release -- Final Steps

Status: Open.

#703 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 10, 2024

v3.0 / Future: Proposal to rename some params to clarify SP vs. IdP

Status: Open.

#700 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024

v3.0: What to do about single_value_compatibility?

Status: Open.

#698 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024

v2.0: Fix coveralls for TruffleRuby

Status: Open.

#697 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024

v2.1: Deprecation Checklist

Status: Open.

#693 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024

v2.1: Validate certificate vs private_key

Status: Open.

#675 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Nov 25, 2023

v2.1: Improve check_idp_cert_expiration behavior

Status: Open.

#674 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Nov 25, 2023