HIGH7.1Go
GHSA-267v-3v32-g6q5· CVE-2023-45683, GO-2023-2114Cross-site Scripting via missing Binding syntax validation
Modified: 9/10/2026
package
Go/github.com/crewjam/saml
pkg:go/github.com/crewjam/saml
CRITICAL9.8Go
GHSA-4hq8-gmxx-h6w9· BIT-grafana-2020-27846, CVE-2020-27846XML Processing error in github.com/crewjam/saml
Modified: 9/10/2026
HIGH7.5Go
GHSA-5mqj-xc49-246p· CVE-2023-28119, GO-2023-1664crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb
Modified: 8/7/2026
CRITICAL9.1Go
GHSA-j2jp-wvqg-wc2g· CVE-2022-41912, GO-2022-1129crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
Modified: 11/8/2023
—Go
GO-2021-0058· BIT-grafana-2020-27846, CVE-2020-27846Signature validation bypass due to XML processing error in github.com/crewjam/saml
Modified: 5/20/2024
—Go
GO-2022-1129· CVE-2022-41912, GHSA-j2jp-wvqg-wc2gAuthentication bypass in github.com/crewjam/saml
Modified: 5/20/2024
—Go
GO-2023-1664· CVE-2023-28119, GHSA-5mqj-xc49-246pDenial of service via deflate compression bomb in github.com/crewjam/saml
Modified: 8/7/2026
—Go
GO-2023-2114· CVE-2023-45683, GHSA-267v-3v32-g6q5Cross-site scripting via missing binding syntax validation in github.com/crewjam/saml
Modified: 5/20/2024