Signature Validation Bypass
Modified: 10/5/2021
package
pkg:go/github.com/russellhaering/gosaml2
Signature Validation Bypass
Modified: 10/5/2021
gosaml2 vulnerable to Denial Of Service Via Deflate Decompression Bomb
Modified: 9/10/2026
gosaml2 CBC Padding Panic — Unauthenticated Process Crash
Modified: 9/10/2026
goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
Modified: 7/8/2026
Unsigned SAML LogoutRequest Acceptance in gosaml2
Modified: 9/10/2026
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
Modified: 7/8/2026
Authentication Bypass in github.com/russellhaering/gosaml2
Modified: 9/10/2026
Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig
Modified: 7/8/2026
Authentication bypass in github.com/russellhaering/gosaml2
Modified: 2/4/2026
Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2
Modified: 5/20/2024
CBC Padding Panic — Unauthenticated Process Crash in github.com/russellhaering/gosaml2
Modified: 3/30/2026
Unsigned SAML LogoutRequest Acceptance in gosaml2 in github.com/russellhaering/gosaml2
Modified: 3/30/2026