Skip to content
OpenAdvisories

Vendor

node-saml

9 known vulnerabilities.

Products

node-saml 4 xml-crypto 3 passport-saml 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2022-39300

    Signature bypass via multiple root elements in node-SAML

    node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary ID…

    node-saml node-saml node-saml npm
  • High 7.4
    CVE-2022-39299 Public exploit

    Signature bypass via multiple root elements in Passport-SAML

    Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession…

    node-saml passport-saml @node-saml/node-saml passport-saml npm