npm/passport-saml CVE-2025-54419: critical 10, EPSS 0.36%
Node-SAML SAML Signature Verification Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.2.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4mxg-3p6v-xgq3#npm/passport-saml
- https://github.com/node-saml/node-saml/security/advisories/GHSA-4mxg-3p6v-xgq3
- https://nvd.nist.gov/vuln/detail/CVE-2025-54419
- https://github.com/node-saml/node-saml/commit/31ead9411ebc3e2385086fa9149b6c17732bca10
- https://github.com/node-saml/node-saml
- https://github.com/node-saml/node-saml/releases/tag/v5.1.0
CVE-2025-54419 · published · modified · JSON