HIGHnpm
GHSA-34r5-q4jw-r36m· CVE-2026-46490samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions
Modified: 6/9/2026
package
npm/samlify
pkg:npm/samlify
HIGH7.5npm
GHSA-8jjf-w7j6-323c· CVE-2017-1000452Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames
Modified: 11/8/2023
CRITICALnpm
GHSA-r683-v43c-6xqv· CVE-2025-47949samlify SAML Signature Wrapping attack
Modified: 5/19/2025