samly vulnerabilities (Hex)

2 vulnerabilities.

• samly Hex Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions CVE-2026-53424 9.1 CriticalAugust 20, 2026
• samly Hex Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses CVE-2026-53425 7.6 HighAugust 20, 2026