Node-saml vulnerabilities

Products

• Node-saml 4
• Xml-crypto 3
• Passport-saml 2

Newest

• node-saml Node-SAML Contains SAML Signature Verification Vulnerability CVE-2025-54419 Fix available 10.0 CriticalJuly 28, 2025
• node-saml Node-SAML SAML Authentication Bypass CVE-2025-54369 Fix available 9.3 CriticalJuly 24, 2025
• node-saml xml-crypto xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment CVE-2025-29775 Public exploitFix available EPSS 10.1% 9.3 CriticalMarch 14, 2025
• node-saml xml-crypto xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References CVE-2025-29774 Public exploitFix available 9.3 CriticalMarch 14, 2025
• node-saml xml-crypto, node saml project xml crypto +1 more XML signature verification bypass due improper verification of signature / signature spoofing CVE-2024-32962 Public exploitFix available 10.0 CriticalMay 1, 2024
• node-saml, node saml project saml +1 more @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError CVE-2023-40178 Fix available 5.3 MediumAugust 21, 2023
• node-saml, node saml project saml +1 more Signature bypass via multiple root elements in node-SAML CVE-2022-39300 Fix available 7.7 HighOctober 12, 2022
• node-saml passport-saml Signature bypass via multiple root elements in Passport-SAML CVE-2022-39299 Public exploitFix available 7.4 HighOctober 12, 2022
• node-saml passport-saml Unlimited transforms allowed for signed nodes CVE-2021-39171 Fix available 5.3 MediumAugust 27, 2021