@node-saml/passport-saml vulnerabilities (npm)

2 vulnerabilities.

• @node-saml/passport-saml npm Node-SAML Contains SAML Signature Verification Vulnerability CVE-2025-54419 Fix available 10.0 CriticalJuly 28, 2025
• @node-saml/passport-saml npm Signature bypass via multiple root elements in Passport-SAML CVE-2022-39299 Public exploitFix available 7.4 HighOctober 12, 2022