github.com/RobotsAndPencils/go-saml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.5

CVE-2023-48703

SAML authentication bypass vulnerability in RobotsAndPencils/go-saml

RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all known versions. This is due to how the `xmlsec1` command line tool is called internally to verify the signature of SAML assertions. When `xml…

RobotsAndPencils go-saml github.com/RobotsAndPencils/go-saml Go

Mar 6, 2024
Medium 5.3

CVE-2020-36563

Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml

XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.

github.com/RobotsAndPencils/go-saml github.com/RobotsAndPencils/go-saml github.com/RobotsAndPencils/go-saml Go

Dec 27, 2022