Security
فارسی
All products

simplesamlphp/saml2

Composer · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect bindingCVE-2025-27773 · GHSA-46R4-F8GJ-XG56 simplesamlphp/saml2-legacysimplesamlphp/saml2 Composer High Fix reported
Validation of SignedInfoCVE-2023-49087 · GHSA-WW7X-3GXH-QM6R simplesamlphp/saml2simplesamlphp/xml-security ComposerRed Hat High Fix reported
SimpleSAMLphp has Possible DoS via XPath TransformCVE-2026-49289 · GHSA-5CJR-MXJ5-WMRX simplesamlphp/saml2-legacysimplesamlphp/saml2 Composer High Fix reported
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypassCVE-2026-49283 · GHSA-6929-8P9F-26JX simplesamlphp/saml2-legacysimplesamlphp/saml2 Composer High Fix reported
SimpleSAMLphp SAML2 has an XXE in parsing SAML messagesCVE-2024-52806 · GHSA-PXM4-R5PH-Q2M2 simplesamlphp/saml2-legacysimplesamlphp/saml2 Composer Medium Fix reported
SimpleSAMLphp SAML2 spoof SAML responsesCVE-2016-9814 · GHSA-R8V4-7VWJ-983XVersion ranges need review. simplesamlphp/saml2 Composer Critical Fix reported
SimpleSAMLphp Improper Verification of Cryptographic SignatureCVE-2018-7644 · GHSA-923W-2XV2-7PR8Version ranges need review. simplesamlphp/saml2 Composer High Fix reported
SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerabilityCVE-2018-6519 · GHSA-HHM8-2J4G-MPGGVersion ranges need review. simplesamlphp/saml2 Composer High Fix reported
SimpleSAMLphp saml2 incorrect signature validationCVE-2018-7711 · GHSA-G888-G2PP-82HFVersion ranges need review. simplesamlphp/saml2 Composer High Fix reported