Skip to content
OpenAdvisories

Package · Packagist

drupal/miniorange_saml

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-87948

    SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

    Drupal SAML SSO - Service Provider drupal/miniorange_saml Packagist
  • Low 3.3
    CVE-2026-87949

    SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

    Drupal SAML SSO - Service Provider drupal/miniorange_saml Packagist
  • Low 3.1
    CVE-2026-87952

    SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150

    Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

    Drupal SAML SSO - Service Provider drupal/miniorange_saml Packagist
  • Low 3.8
    CVE-2026-87951

    SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149

    Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

    Drupal SAML SSO - Service Provider drupal/miniorange_saml Packagist
  • Low 3.3
    CVE-2026-87953

    SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151

    Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

    Drupal SAML SSO - Service Provider drupal/miniorange_saml Packagist