CVE-2016-5697: Onelogin Ruby-SAML

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.

Affected products

• Onelogin Ruby-SAML: up to and including 1.2.0

Published 2017-01-23. Last modified 2026-06-17.