Skip to content
OpenAdvisories
High DLA-4161-1 1 CVE

simplesamlphp - security update

Published May 9, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 simplesamlphp 1.19.0-1+deb11u2

Vulnerabilities 1

  • High 8.6
    CVE-2025-27773

    SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding

    The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect bi…

    simplesamlphp saml2 simplesamlphp simplesamlphp Debian Ubuntu Packagist