Robotsandpencils Go-Saml

2 CVEs affecting Robotsandpencils Go-Saml. Latest disclosed: 2024-03-06. Critical: 0, High: 1.

Top CVEs affecting Robotsandpencils Go-Saml
CVESeverityScorePublishedSummary
CVE-2023-48703High7.52024-03-06RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all known versions. This is due to how the `x…
CVE-2020-36563Medium5.32022-12-28XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending…