Vendors / RobotsAndPencils Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now RobotsAndPencils records in CISA KEV No RobotsAndPencils vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all known versions.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00559 · Published 2024-03-06 · No fix listed CWE-287
Priority LOW 30
XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00316 · Published 2022-12-27 · No fix listed CWE-347
Open these records in search → All records by CVSS severity
0 1 1 0 0
