passport-saml vulnerabilities (npm)

3 vulnerabilities.

• passport-saml npm Node-SAML Contains SAML Signature Verification Vulnerability CVE-2025-54419 Fix available 10.0 CriticalJuly 28, 2025
• passport-saml npm Signature bypass via multiple root elements in Passport-SAML CVE-2022-39299 Public exploitFix available 7.4 HighOctober 12, 2022
• passport-saml npm Unlimited transforms allowed for signed nodes CVE-2021-39171 Fix available 5.3 MediumAugust 27, 2021