Skip to content
OpenAdvisories

Package · Packagist

onelogin/php-saml

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-9wrw-p9rm-r782

    onelogin/php-saml Improper signature validation on LogoutRequest/LogoutResponse.

    In order to verify Signatures on Logoutrequests and LogoutResponses we use the verifySignature of the class XMLSecurityKey from the xmlseclibs library. That method end up calling openssl_verify() depending on the signature algorithm used. The openssl_verify()…

    onelogin/php-saml Packagist