Skip to content
OpenAdvisories

Vendor

krakenjs

2 known vulnerabilities.

Products

passport-saml-encrypted 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-89043

    passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

    passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend…

    krakenjs passport-saml-encrypted