All products

samlify

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML AssertionsCVE-2026-46490 · GHSA-34R5-Q4JW-R36M samlify npm High Fix reported
samlify SAML Signature Wrapping attackCVE-2025-47949 · GHSA-R683-V43C-6XQV samlify npm Critical Fix reported
Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernamesCVE-2017-1000452 · GHSA-8JJF-W7J6-323C samlify npm High Fix reported