Vulnerability GHSA-267v-3v32-g6q5
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 7.1
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
October 17, 2023 at 02:20 PM UTC
Cross-site Scripting via missing Binding syntax validation
v0.3.0 - v0.4.13
v0.3.0 - v0.4.13
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/saml
v0.3.0 - v0.5.1 GO-2026-6909
v0.3.0 - v0.5.1 GO-2026-6909
Unknown
3 years ago
Cross-site scripting via missing binding syntax validation in github.com/crewjam/saml
v0.3.0 - v0.4.13 GO-2023-2114
v0.3.0 - v0.4.13 GO-2023-2114
Unknown
3 years ago
Denial of service via deflate compression bomb in github.com/crewjam/saml
v0.3.0 - v0.4.12 GO-2023-1664
v0.3.0 - v0.4.12 GO-2023-1664
High Risk
3 years ago
crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb
v0.3.0 - v0.4.12 GHSA-5mqj-xc49-246p
v0.3.0 - v0.4.12 GHSA-5mqj-xc49-246p
Critical
3 years ago
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
v0.3.0 - v0.4.8 GHSA-j2jp-wvqg-wc2g
v0.3.0 - v0.4.8 GHSA-j2jp-wvqg-wc2g
Impacted packages
Timeline
Published
3 years ago
October 17, 2023 at 02:20 PM UTC
Fixed (v0.4.14)
3 years ago
October 14, 2023 at 02:18 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC