The 1.18.X is not affected by [CVE-2025-66568](https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-9v8j-x534-2fx3) and [CVE-2025-66567](https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-9v8j-x534-2fx3). If you are using ruby-saml <= 1.18.0, upgrade!