node-saml Passport Saml Vulnerabilities

Node-saml Passport-saml vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

12 October 2022

Signature bypass via multiple root elements in Passport-SAML
CVE-2022-39299
Node-samlPassport-saml👾🟡EPSS 13%7.4HIGH

27 August 2021

Unlimited transforms allowed for signed nodes
CVE-2021-39171
Node-samlPassport-saml5.3MEDIUM