CyberSecBulletin

Litesaml vulnerabilities

We track 1 vulnerability in Litesaml products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Litesaml vulnerabilities

  • 8.1 High severity

    lightsaml: Improper Verification of Cryptographic Signature

    CVE-2026-63182Litesaml

    LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate support, and message bindings. Prior to 4.7.1 and 5.0.1, LightSAML and xmlseclibs disagree about which assertion an inbound SAML signature covers