HIGH8.6Packagist
GHSA-46r4-f8gj-xg56· CVE-2025-27773The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding
Modified: 9/10/2026
package
Packagist/simplesamlphp/saml2
pkg:packagist/simplesamlphp/saml2
HIGH7.5Packagist
GHSA-5cjr-mxj5-wmrx· CVE-2026-49289SimpleSAMLphp has Possible DoS via XPath Transform
Modified: 8/5/2026
HIGH8.7Packagist
GHSA-6929-8p9f-26jx· CVE-2026-49283SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
Modified: 8/4/2026
HIGH7.5Packagist
GHSA-923w-2xv2-7pr8· CVE-2018-7644SimpleSAMLphp Improper Verification of Cryptographic Signature
Modified: 4/25/2024
HIGH8.1Packagist
GHSA-g888-g2pp-82hf· CVE-2018-7711SimpleSAMLphp saml2 incorrect signature validation
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-hhm8-2j4g-mpgg· CVE-2018-6519SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability
Modified: 4/25/2024
HIGH8.3Packagist
GHSA-pxm4-r5ph-q2m2· CVE-2024-52806SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
Modified: 12/13/2024
CRITICAL9.1Packagist
GHSA-r8v4-7vwj-983x· CVE-2016-9814SimpleSAMLphp SAML2 spoof SAML responses
Modified: 12/7/2024
HIGH7.5Packagist
GHSA-ww7x-3gxh-qm6r· CVE-2023-49087Validation of SignedInfo
Modified: 9/10/2026