Skip to content
OpenAdvisories

Package · Go

github.com/RobotsAndPencils/go-saml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-48703

    SAML authentication bypass vulnerability in RobotsAndPencils/go-saml

    RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all known versions. This is due to how the `xmlsec1` command line tool is called internally to verify the signature of SAML assertions. When `xml…

    RobotsAndPencils go-saml github.com/RobotsAndPencils/go-saml Go