Saml_project Saml
4 CVEs affecting Saml_project Saml. Latest disclosed: 2023-10-16. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27846 | Critical | 9.8 | 2020-12-21 | A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnera… |
CVE-2022-41912 | Critical | 9.1 | 2022-11-28 | The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion eleme… |
CVE-2023-28119 | High | 7.5 | 2023-03-22 | The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, the package's use of `flate.NewReader` d… |
CVE-2023-45683 | High | 7.1 | 2023-10-16 | github.com/crewjam/saml is a saml library for the go language. In affected versions the package does not validate the ACS Location URI according to the SAML bi… |