Bump ruby-saml to v1.17.0 to fix CVE-2024-4540

apokalipto / devise_saml_authenticatable

Devise SAML 2.0 authentication strategy

MIT License

294 stars 153 forks source link

Closed xaviercrochet closed 2 hours ago

xaviercrochet commented 1 week ago

Hello everyone 👋

The following security vulnerability was recently discovered CVE-2024-4540

A new version of ruby-saml, containing a fix for this bug, was released a couple of days ago: changelog

This PR bumps the ruby-saml dependency to the version that contains the fix.

Please let me know if you need more informations...

Thank you!

xaviercrochet commented 9 hours ago

Hey Adam.. what is currently missing for this MR to be merged?

Cheers,

Xavier

adamstegman commented 2 hours ago

Thanks for the bump! I'll merge this.