Skip to content
OpenAdvisories

Package · Go

github.com/russellhaering/gosaml2

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical —
    GHSA-5684-g483-2249

    Signature Validation Bypass

    ### Impact Given a valid SAML Response, an attacker can potentially modify the document, bypassing signature validation in order to pass off the altered document as a signed one. This enables a variety of attacks, including users accessing accounts other than…

    github.com/russellhaering/gosaml2 Go
  • Critical 9.8
    CVE-2020-29509

    Authentication Bypass in github.com/russellhaering/gosaml2

    The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of proces…

    golang Go golang go Debian Ubuntu Azure Linux Alpine Go