Go/github.com/russellhaering/gosaml2: critical

Signature Validation Bypass

Action: Upgrade github.com/russellhaering/gosaml2 to 0.5.0 or later.

go get github.com/russellhaering/gosaml2@v0.5.0

Affected

Fixed versions

Sources

• osv: GHSA-5684-g483-2249
• https://github.com/russellhaering/gosaml2/security/advisories/GHSA-5684-g483-2249
• https://github.com/russellhaering/gosaml2

published 2021-05-24T16:59:47Z · modified 2021-10-05T17:07:09Z · JSON