Vulnerabilities

TI-2025-34181 CVE-2025-54369 · GHSA-m837-g268-mmv7

Node-SAML SAML Authentication Bypass

MEDIUM 47

Node-SAML is a SAML library not dependent on any frameworks that runs in Node.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00546 Published 2025-12-12 Fixed in 5.1.0 CWE-347

TI-2025-34225 CVE-2025-54419 · GHSA-4mxg-3p6v-xgq3

MEDIUM 49

A SAML library not dependent on any frameworks that runs in Node.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00379 Published 2025-07-28 Fixed in 5.1.0 CWE-287

TI-2025-21187 CVE-2025-29775 · GHSA-x3m8-899r-f7c3

HIGH 81

xml-crypto is an XML digital signature and encryption library for Node.js.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.10141 Published 2025-03-14 Partial fix · 6.0.1, 3.2.1 +1 CWE-347

TI-2025-21186 CVE-2025-29774 · GHSA-9p8x-f768-wp2g

HIGH 81

xml-crypto is an XML digital signature and encryption library for Node.js.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.09103 Published 2025-03-14 Partial fix · 6.0.1, 3.2.1 +1 CWE-347

TI-2024-21829 CVE-2024-32962 · GHSA-2xp3-57p7-qf4v

HIGH 82

xml-crypto is an xml digital signature and encryption library for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00833 Published 2024-05-02 Fixed in 6.0.0 CWE-347