Krakenjs vulnerabilities
We track 2 vulnerabilities in Krakenjs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Krakenjs vulnerabilities
- 7.4 High severity
passport-saml-encrypted: Improper Verification of Cryptographic Signature
passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend
- 9.1 Critical severity
passport-saml-encrypted: Improper Verification of Cryptographic Signature
passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID a