Skip to content
OpenAdvisories

Package · Go

github.com/russellhaering/gosaml2

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-26483

    gosaml2 vulnerable to Denial of Service via deflate decompression bomb

    gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML authentication support are likely susceptible to Denial of Service attacks. A bug in this library enables attackers to craft a `deflate`-compressed request whi…

    russellhaering gosaml2 github.com/russellhaering/gosaml2 Go