Go/github.com/crewjam/saml CVE-2020-27846: unknown, EPSS 4.93%

Signature validation bypass due to XML processing error in github.com/crewjam/saml

Action: Upgrade github.com/crewjam/saml to 0.4.3 or later.

go get github.com/crewjam/saml@v0.4.3

Affected

Fixed versions

Sources

• osv: GO-2021-0058
• https://github.com/crewjam/saml/commit/da4f1a0612c0a8dd0452cf8b3c7a6518f6b4d053

CVE-2020-27846 · published 2021-04-14T20:04:52Z · modified 2024-05-20T16:03:47Z · JSON