Skip to content
OpenAdvisories

Package · npm

passport-wsfed-saml2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-46573

    passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling

    passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a v…

    auth0 passport-wsfed-saml2 passport-wsfed-saml2 npm
  • High —
    GHSA-5wrg-8fxp-cx9r

    passport-wsfed-saml2 Signature Bypass vulnerability

    ## Information Please note that this is not a new disclosure, and is previously reported in our [SECURITY-NOTICE.md](https://github.com/auth0/passport-wsfed-saml2/commit/520b9fc0bb4249ce83bec47e30153419f086ab70 ) which we removed in favor of github advisory. …

    passport-wsfed-saml2 npm
  • High 8.1
    CVE-2017-16897

    passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token

    A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign th…

    passport-wsfed-saml2 npm