Passport-saml Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Passport-saml Project records in CISA KEV

No Passport-saml Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-18675 CVE-2022-39299 · GHSA-m974-647v-whv7

MEDIUM 45

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04494 Published 2022-10-12 Fixed in 3.2.2, 4.0.0-beta.5 +1 CWE-347

TI-2021-16557 CVE-2021-39171 · GHSA-5379-r78w-42h2

LOW 36

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01323 Published 2021-08-27 Fixed in 3.1.0 CWE-400