Samlify Project

3 CVEs across 1 Samlify Project products. Browse Samlify Project vulnerabilities, severities, and proof-of-concept exploits.

Samlify Project products with known CVEs

ProductCVEs
Samlify3
Samlify Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-46490High8.82026-06-08samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted…
CVE-2025-47949High7.52025-05-19samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to fo…
CVE-2017-1000452High7.52018-01-02An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitr…