Ruby‑SAML parser bug lets attackers hijack SSO accounts
Two critical auth bypass CVEs in ruby‑saml ≤v1.17.0 stem from differing XML parsers (REXML vs Nokogiri). With one valid signature, an attacker can forge SAML assertions and log in as any user, compromising SSO‑protected apps. Updating to ruby‑saml 1.18.0 mitigates the issue for downstream libraries and services.