Vulnerability GHSA-5mqj-xc49-246p
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
March 22, 2023 at 09:23 PM UTC
crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb
v0.3.0 - v0.4.12
v0.3.0 - v0.4.12
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/saml
v0.3.0 - v0.5.1 GO-2026-6909
v0.3.0 - v0.5.1 GO-2026-6909
Unknown
3 years ago
Cross-site scripting via missing binding syntax validation in github.com/crewjam/saml
v0.3.0 - v0.4.13 GO-2023-2114
v0.3.0 - v0.4.13 GO-2023-2114
High Risk
3 years ago
Cross-site Scripting via missing Binding syntax validation
v0.3.0 - v0.4.13 GHSA-267v-3v32-g6q5
v0.3.0 - v0.4.13 GHSA-267v-3v32-g6q5
Unknown
3 years ago
Denial of service via deflate compression bomb in github.com/crewjam/saml
v0.3.0 - v0.4.12 GO-2023-1664
v0.3.0 - v0.4.12 GO-2023-1664
Critical
3 years ago
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
v0.3.0 - v0.4.8 GHSA-j2jp-wvqg-wc2g
v0.3.0 - v0.4.8 GHSA-j2jp-wvqg-wc2g
Impacted packages
Timeline
Published
3 years ago
March 22, 2023 at 09:23 PM UTC
Fixed (v0.4.13)
3 years ago
March 22, 2023 at 07:22 PM UTC
Last Modified
3 months ago
August 07, 2026 at 08:12 AM UTC