Skip to content
OpenAdvisories

Package · Go

github.com/casdoor/casdoor

20 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-9090 Public exploit

    CVE-2026-9090

    Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLRes…