Skip to content
OpenAdvisories

Product · dropbox

esaml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-28809

    XXE in esaml SAML library allows local file read and potential SSRF

    XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into processed SAML documents, and potentially perform SSRF via crafted SAML messages. esaml parses atta…

    dropbox handnot2 arekinath Jump-App Hex