npm/@node-saml/passport-saml CVE-2025-54419: critical 10, EPSS 0.36%
Node-SAML SAML Signature Verification Vulnerability
Action: Upgrade @node-saml/passport-saml to 5.1.0 or later.
npm i @node-saml/passport-saml@5.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.0 | - |
Fixed versions
| 5.1.0 |
Sources
- osv: GHSA-4mxg-3p6v-xgq3#npm/@node-saml/passport-saml
- https://github.com/node-saml/node-saml/security/advisories/GHSA-4mxg-3p6v-xgq3
- https://nvd.nist.gov/vuln/detail/CVE-2025-54419
- https://github.com/node-saml/node-saml/commit/31ead9411ebc3e2385086fa9149b6c17732bca10
- https://github.com/node-saml/node-saml
- https://github.com/node-saml/node-saml/releases/tag/v5.1.0
CVE-2025-54419 · published · modified · JSON