simplesamlphp Saml2 Vulnerabilities

Simplesamlphp Saml2 vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

19 August 2026

SAML2 Library Vulnerability in SimpleSAMLphp Affects XML Signature Processing
CVE-2026-49289
SimplesamlPHPSaml27.5HIGH
SAML2 Library Vulnerability in SimpleSAMLphp Affects Multiple Identity Providers
CVE-2026-49283
SimplesamlPHPSaml28.7HIGH

11 March 2025

Signature Confusion Vulnerability in SimpleSAMLphp SAML2 Library
CVE-2025-27773
SimplesamlPHPSaml28.6HIGH

2 December 2024

Fixed XXE vulnerability in SAML2 library
CVE-2024-52806
SimplesamlPHPSaml28.3HIGH

2 February 2018

Regular Expression Denial of Service in SimpleSAMLphp by Lasso Inc.
CVE-2018-6519
SimplesamlPHPSaml27.5HIGH