CGA-4239-j45h-4c5h

GitLab CE FIPS 18.3.1 uses ruby-saml 1.18.0, which is vulnerable to CVE-2025-54572 (DoS vulnerability with large SAML response bypassing message_max_bytesize). Fixed version: 1.18.1. Deferring to upstream GitLab to address this CVE in a subsequent update. See: https://docs.gitlab.com/ee/development/dependencies.html.