Skip to content
OpenAdvisories

Package · npm

node-saml

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    Node-SAML SAML Authentication Bypass

    Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions 5.0.1 and below, Node-SAML loads the assertion from the (unsigned) original response document. This is different than the parts that are verified when checking signatur…