Skip to content
OpenAdvisories

Product · litesaml

lightsaml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-63182

    LightSAML: Signature reference wrapping permits unsigned assertion claims

    LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate support, and message bindings. Prior to 4.7.1 and 5.0.1, LightSAML and xmlseclibs disagree about which assertion an inbound SAML signature cover…

    litesaml lightsaml