HIGH8.6Packagist
GHSA-46r4-f8gj-xg56· CVE-2025-27773The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding
Modified: 9/10/2026
package
Packagist/simplesamlphp/saml2-legacy
pkg:packagist/simplesamlphp/saml2-legacy
HIGH7.5Packagist
GHSA-5cjr-mxj5-wmrx· CVE-2026-49289SimpleSAMLphp has Possible DoS via XPath Transform
Modified: 8/5/2026
HIGH8.7Packagist
GHSA-6929-8p9f-26jx· CVE-2026-49283SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
Modified: 8/4/2026
HIGH8.3Packagist
GHSA-pxm4-r5ph-q2m2· CVE-2024-52806SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
Modified: 12/13/2024