Skip to contentDrupal Saml Sso - Service Provider vulnerabilities
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151CVE-2026-87953Fix available3.3 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150CVE-2026-87952Fix available3.1 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149CVE-2026-87951Fix available3.8 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148CVE-2026-87950Fix available5.3 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147CVE-2026-87949Fix available3.3 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146CVE-2026-87948Fix available3.5 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145CVE-2026-87947Fix available4.8 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144CVE-2026-87946Fix available4.8 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143CVE-2026-87945Fix available5.4 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142CVE-2026-87944Fix available4.8 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141CVE-2026-87943Fix available6.5 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031CVE-2026-5343Fix available7.4 High
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018CVE-2026-3217Fix available6.1 Medium