Skip to content
OpenAdvisories
High · 7.4 CVE-2026-5343 DRUPAL-CONTRIB-2026-031EUVD-2026-33228GHSA-9622-2jm8-94x7

SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031

Published May 28, 2026 · Updated May 29, 2026 · Assigned by drupal

Vendor: Drupal Product: SAML SSO - Service Provider Package: drupal/miniorange_saml Ecosystem: Packagist

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation.

This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.

Affected products

VendorProductAffectedFixed
Drupal SAML SSO - Service Provider 0.0.0 – < 3.1.4 3.1.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/miniorange_saml < 3.1.4 3.1.4 DRUPAL-CONTRIB-2026-031

Advisories 1

References