node-saml vulnerabilities
9 published CVEs name node-saml among the affected products.
- 9Published CVEs9 of them scored
- 1Last 12 monthspublished in the last year
- 5Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-54369
Node-SAML SAML Authentication Bypass
node-saml · node-saml
Critical9.3 - CVE-2025-54419
Node-SAML Contains SAML Signature Verification Vulnerability
node-saml · node-saml
Critical10.0 - CVE-2025-29775
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
node-saml · xml-crypto
Critical9.3 - CVE-2025-29774
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
node-saml · xml-crypto
Critical9.3 - CVE-2024-32962
XML signature verification bypass due improper verification of signature / signature spoofing
node-saml · xml-crypto
Critical10.0 - CVE-2023-40178
@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError
node-saml · node-saml
Medium5.3 - CVE-2022-39300
Signature bypass via multiple root elements in node-SAML
node-saml · node-saml
High7.7 - CVE-2022-39299
Signature bypass via multiple root elements in Passport-SAML
node-saml · passport-saml
High7.4 - CVE-2021-39171
Unlimited transforms allowed for signed nodes
node-saml · passport-saml
Medium5.3