Skip to content
OpenAdvisories

Package · npm

@node-saml/node-saml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40178

    @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError

    Node-SAML is a SAML library not dependent on any frameworks that runs in Node. The lack of checking of current timestamp allows a LogoutRequest XML to be reused multiple times even when the current time is past the NotOnOrAfter. This could impact the user whe…

    node-saml node-saml @node-saml/node-saml npm