Skip to content
OpenAdvisories

Package · npm

samlify

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.7
    CVE-2026-46490 Public exploit

    samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions

    samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML marku…

    tngan samlify samlify npm
  • Critical 9.9
    CVE-2025-47949

    samlify SAML Signature Wrapping attack

    samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the…

    tngan samlify samlify npm
  • High 7.5
    CVE-2017-1000452

    Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames

    An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.

    samlify npm