CRITICAL10.0npm
GHSA-4mxg-3p6v-xgq3· CVE-2025-54419Node-SAML SAML Signature Verification Vulnerability
Modified: 8/8/2025
package
npm/@node-saml/node-saml
pkg:npm/%40node-saml/node-saml
CRITICALnpm
GHSA-m837-g268-mmv7· CVE-2025-54369Node-SAML SAML Authentication Bypass
Modified: 9/10/2026
HIGH8.1npm
GHSA-m974-647v-whv7· CVE-2022-39299Signature bypass via multiple root elements
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-vx8m-6fhw-pccw· CVE-2023-40178@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError
Modified: 9/10/2026