CyberSecBulletin

Crewjam vulnerabilities

We track 2 vulnerabilities in Crewjam products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Crewjam vulnerabilities

  • 7.5 High severity

    saml: Allocation of Resources Without Limits or Throttling

    CVE-2023-28119Crewjam

    The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, the package's use of `flate.NewReader` does not limit the size of the input. The user can pass more than 1 MB of data in the HTTP request to

  • 9.8 Critical severity

    saml: Improper Authentication

    CVE-2022-41912CrewjamEPSS 2.34%

    The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to