Gosaml2 Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gosaml2 Project records in CISA KEV

No Gosaml2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Gosaml2 · all components

TI-2020-06250 CVE-2020-7731 · GHSA-prjq-f4q3-fvfr

LOW 36

This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01662 Published 2021-04-30 Fixed in 0.7.0, 1.1.1 CWE-476

TI-2023-11630 CVE-2023-26483 · GHSA-6gc3-crp7-25w5

LOW 32

gosaml2 is a Pure Go implementation of SAML 2.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00964 Published 2023-03-03 Partial fix · 0.9.0 CWE-409