Vendor

russellhaering

3 known vulnerabilities.

Products

goxmldsig 2 gosaml2 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2023-26483

gosaml2 vulnerable to Denial of Service via deflate decompression bomb

gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML authentication support are likely susceptible to Denial of Service attacks. A bug in this library enables attackers to craft a `deflate`-compressed request whi…

russellhaering gosaml2 github.com/russellhaering/gosaml2 Go

Mar 3, 2023
Medium 5.3

CVE-2020-15216

Signature Validation Bypass in goxmldsig

In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxml…

russellhaering goxmldsig github.com/russellhaering/goxmldsig golang-github-russellhaering-goxmldsig Debian Ubuntu Go

Sep 29, 2020