passport-saml vulnerabilities

1 known vulnerability in passport-saml from Node-saml. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  passport-saml: Improper Verification of Cryptographic Signature

  CVE-2022-39299Oct 12, 2022Node-samlEPSS 4.49%

  Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession