onelogin security advisories
3 threat alerts tracking vulnerabilities and security advisories that affect onelogin products.
Vulnios monitors onelogin CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent onelogin security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-45409 — onelogin, omniauth — ruby-saml, omniauth_saml
The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthentic
criticalCVE-2024-45409Critical Vulnerability: CVE-2025-66567 — onelogin — ruby-saml
The ruby-saml library is for implementing the client side of a SAML authorization. ruby-saml versions up to and including 1.12.4 contain an authentication bypass vulnerability due to an incomplete fix
criticalCVE-2025-66567Critical Vulnerability: CVE-2025-66568 — onelogin — ruby-saml
The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vulnerable to authentication bypass through the libxml2 canonicalization process use
criticalCVE-2025-66568
Track onelogin exposure across your environment
Vulnios automatically cross-references your asset inventory against new onelogin CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan