Vulnerability GO-2023-1664
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 years ago
August 23, 2023 at 02:38 PM UTC
Denial of service via deflate compression bomb in github.com/crewjam/saml
<0.4.13
<0.4.13
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/saml
* GO-2026-6909
* GO-2026-6909
Unknown
3 years ago
Cross-site scripting via missing binding syntax validation in github.com/crewjam/saml
<0.4.14 GO-2023-2114
<0.4.14 GO-2023-2114
High Risk
3 years ago
Cross-site Scripting via missing Binding syntax validation
<0.4.14 GHSA-267v-3v32-g6q5
<0.4.14 GHSA-267v-3v32-g6q5
High Risk
3 years ago
crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb
<0.4.13 GHSA-5mqj-xc49-246p
<0.4.13 GHSA-5mqj-xc49-246p
Critical
3 years ago
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
<0.4.9 GHSA-j2jp-wvqg-wc2g
<0.4.9 GHSA-j2jp-wvqg-wc2g
Impacted packages
Timeline
Published
3 years ago
August 23, 2023 at 02:38 PM UTC
Fixed (v0.4.13)
3 years ago
March 22, 2023 at 07:22 PM UTC
Last Modified
3 months ago
August 07, 2026 at 08:12 AM UTC