All products

github.com/russellhaering/gosaml2

Go · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Unsigned SAML LogoutRequest Acceptance in gosaml2GHSA-PCGW-QCV5-H8CH · GO-2026-4764Version ranges need review. github.com/russellhaering/gosaml2 Go High Fix reported
gosaml2 CBC Padding Panic — Unauthenticated Process CrashGHSA-HWQM-QVJ9-4JR2 · GO-2026-4760Version ranges need review. github.com/russellhaering/gosaml2 Go High Fix reported
gosaml2 vulnerable to Denial Of Service Via Deflate Decompression BombCVE-2023-26483 · GHSA-6GC3-CRP7-25W5Version ranges need review. github.com/russellhaering/gosaml2Red Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-main-rhel8 GoRed Hat Medium Fix reported
Authentication Bypass in github.com/russellhaering/gosaml2CVE-2020-29509 · GHSA-XHQQ-X44F-9FGGVersion ranges need review. github.com/russellhaering/gosaml2Red Hat Enterprise Linux 7/golang GoRed Hat Critical Fix reported
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer DereferenceCVE-2020-7731 · GHSA-PRJQ-F4Q3-FVFR github.com/russellhaering/gosaml2github.com/russellhaering/goxmldsig Go High Fix reported
goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signaturesCVE-2020-7711 · GHSA-MQQV-CHPX-VQ25 github.com/russellhaering/gosaml2github.com/russellhaering/goxmldsig GoRed Hat High Fix reported
Signature Validation BypassGHSA-5684-G483-2249 github.com/russellhaering/gosaml2 Go Critical Fix reported