PatchTheCVEsaml project vulnerabilities
Recent CVEs affecting saml project products. 4 tracked.
saml project has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-10-16. Highest priority: CVE-2020-27846 (score 72/100).
- CVE-2023-45683 HIGH 7.1 UPGRADE github.com/crewjam/saml is a saml library for the go language
- CVE-2023-28119 HIGH 7.5 DOWNGRADE The crewjam/saml go library contains a partial implementation of the SAML standard in golang
- CVE-2022-41912 CRITICAL 9.1 UPGRADE The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing S
- CVE-2020-27846 CRITICAL 9.8 UPGRADE UPGRADE A signature verification vulnerability exists in crewjam/saml
FAQ
How do I fix saml project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is saml project being exploited right now?
None of the tracked saml project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which saml project CVE should I patch first?
CVE-2020-27846 currently ranks highest (72/100): A signature verification vulnerability exists in crewjam/saml.