Vulnerability in the ruby-saml library leading to authentication bypass in GitLab.
Correction updates for the collaborative development platform GitLab — versions 17.9.2, 17.8.5, and 17.7.7 — have been released, addressing a vulnerability (CVE-2025-25291, CVE-2025-25292) that allows SAML (Security Assertion Markup Language) authentication bypass. The vulnerability exists in the Ruby library ruby-saml, which implements SAML authorization functions. Besides GitLab, the vulnerability also affects other projects using this library. The issue has been fixed in ruby-saml updates 1.18.0 […]
