HIGHnpm
GHSA-5wrg-8fxp-cx9rpassport-wsfed-saml2 Signature Bypass vulnerability
Modified: 6/21/2023
package
npm/passport-wsfed-saml2
pkg:npm/passport-wsfed-saml2
HIGH8.1npm
GHSA-77fw-rf4v-vfp9· CVE-2017-16897passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
Modified: 11/8/2023
HIGHnpm
GHSA-8gqj-226h-gm8r· CVE-2025-46573Passport-wsfed-saml2 allows SAML Authentication Bypass via Attribute Smuggling
Modified: 5/7/2025
MEDIUM5.3npm
GHSA-ppjq-qxhx-m25f· CVE-2022-23505Authentication Bypass for passport-wsfed-saml2
Modified: 11/8/2023
CRITICALnpm
GHSA-wjmp-wphq-jvqf· CVE-2025-46572Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping
Modified: 5/6/2025