Node-Saml
9 CVEs across 3 Node-Saml products. Browse Node-Saml vulnerabilities, severities, and proof-of-concept exploits.
Node-Saml products with known CVEs
Node-Saml CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-54419 | Critical | 10.0 | 2025-07-28 | A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the (unsigned) original response documen… |
CVE-2025-54369 | | | 2025-07-24 | Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions 5.0.1 and below, Node-SAML loads the assertion from the (unsigned) o… |
CVE-2025-29775 | | | 2025-03-14 | xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1… |
CVE-2025-29774 | | | 2025-03-14 | xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1… |
CVE-2024-32962 | Critical | 10.0 | 2024-05-02 | xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the s… |
CVE-2023-40178 | Medium | 5.3 | 2023-08-23 | Node-SAML is a SAML library not dependent on any frameworks that runs in Node. The lack of checking of current timestamp allows a LogoutRequest XML to be reuse… |
CVE-2022-39300 | High | 7.7 | 2022-10-13 | node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authentication on a website usi… |
CVE-2022-39299 | High | 7.4 | 2022-10-12 | Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authenticati… |
CVE-2021-39171 | Medium | 5.3 | 2021-08-27 | Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Prior to version 3.1.0, a malicious SAML payload can requ… |