Samlify_project Samlify
3 CVEs affecting Samlify_project Samlify. Latest disclosed: 2026-06-08. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-46490 | High | 8.8 | 2026-06-08 | samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted… |
CVE-2025-47949 | High | 7.5 | 2025-05-19 | samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to fo… |
CVE-2017-1000452 | High | 7.5 | 2018-01-02 | An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitr… |