Skip to content
OpenAdvisories

Vendor

krakenjs

2 known vulnerabilities.

Products

passport-saml-encrypted 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-89042

    passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification

    passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID …

    krakenjs passport-saml-encrypted