Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1
CVE-2022-39299
- EPSS 7.45%
- Published 12.10.2022 21:15:09
- Last modified 21.11.2024 07:17:59
Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in p...
7.5
CVE-2021-39171
- EPSS 0.36%
- Published 27.08.2021 22:15:07
- Last modified 21.11.2024 06:18:47
Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Prior to version 3.1.0, a malicious SAML payload can require transforms that consume significant system resources to process, thereby resulting in r...
1