GHSA-5wrg-8fxp-cx9r
passport-wsfed-saml2 Signature Bypass vulnerability
GHSA-5wrg-8fxp-cx9r is a vulnerability with no CVSS score yet in passport-wsfed-saml2, published June 21, 2023. No source lists public exploit code. Fixed in passport-wsfed-saml2 3.0.10.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.0.10passport-wsfed-saml2
Description
Information
Please note that this is not a new disclosure, and is previously reported in our SECURITY-NOTICE.md which we removed in favor of github advisory.
Overview
A vulnerability was found in the validation of a SAML signature. The validation doesn't ensure that the "Signature" tag is at the proper location inside an "Assertion" tag. This leads to a signature relocation attack where the attacker can corrupt one field of data while maintaining the signature valid. This could allow an authenticated attacker to "remove" one group from the assertion or corrupt another field of an assertion.
Am I affected?
You are affected if you are using the passport-wsfed-saml2 library to version < 3.0.10
How do I fix it?
You may fix this issue by upgrading passport-wsfed-saml2 library to version 3.0.10 or above.
Will the fix impact my users?
This fix patches the library that your application runs, but will not impact your users, their current state, or any existing sessions.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
passport-wsfed-saml2npm | before 3.0.10 | 3.0.10 |
What each source reports
GitHub AdvisoriesNo score
passport-wsfed-saml2 Signature Bypass vulnerability
Information
Please note that this is not a new disclosure, and is previously reported in our SECURITY-NOTICE.md which we removed in favor of github advisory.
Overview
A vulnerability was found in the validation of a SAML signature. The validation doesn't ensure that the "Signature" tag is at the proper location inside an "Assertion" tag. This leads to a signature relocation attack where the attacker can corrupt one field of data while maintaining the signature valid. This could allow an authenticated attacker to "remove" one group from the assertion or corrupt another field of an assertion.
Am I affected?
You are affected if you are using the passport-wsfed-saml2 library to version < 3.0.10
How do I fix it?
You may fix this issue by upgrading passport-wsfed-saml2 library to version 3.0.10 or above.
Will the fix impact my users?
This fix patches the library that your application runs, but will not impact your users, their current state, or any existing sessions.
- Record
GHSA-5wrg-8fxp-cx9r- Updated
- 2026-11-02
OSVNo score
passport-wsfed-saml2 Signature Bypass vulnerability
Information
Please note that this is not a new disclosure, and is previously reported in our SECURITY-NOTICE.md which we removed in favor of github advisory.
Overview
A vulnerability was found in the validation of a SAML signature. The validation doesn't ensure that the "Signature" tag is at the proper location inside an "Assertion" tag. This leads to a signature relocation attack where the attacker can corrupt one field of data while maintaining the signature valid. This could allow an authenticated attacker to "remove" one group from the assertion or corrupt another field of an assertion.
Am I affected?
You are affected if you are using the passport-wsfed-saml2 library to version < 3.0.10
How do I fix it?
You may fix this issue by upgrading passport-wsfed-saml2 library to version 3.0.10 or above.
Will the fix impact my users?
This fix patches the library that your application runs, but will not impact your users, their current state, or any existing sessions.
- Record
GHSA-5wrg-8fxp-cx9r- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.