All products

github.com/crewjam/saml

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/samlGO-2026-6909 github.com/crewjam/saml Go Unknown No fix reported
Cross-site Scripting via missing Binding syntax validationCVE-2023-45683 · GHSA-267V-3V32-G6Q5Version ranges need review. github.com/crewjam/saml Go High Fix reported
crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression BombCVE-2023-28119 · GHSA-5MQJ-XC49-246PVersion ranges need review. github.com/crewjam/saml Go High Fix reported
XML Processing error in github.com/crewjam/samlCVE-2020-27846 · GHSA-4HQ8-GMXX-H6W9Version ranges need review. github.com/crewjam/samlOpenShift Service Mesh 1/servicemesh-grafana GoRed Hat Critical Fix reported
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authenticationCVE-2022-41912 · GHSA-J2JP-WVQG-WC2GVersion ranges need review. github.com/crewjam/samlRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 GoRed Hat Critical Fix reported