npm/node-saml CVE-2025-54369: critical, EPSS 0.55%
Node-SAML SAML Authentication Bypass
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.1.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m837-g268-mmv7
- https://github.com/node-saml/node-saml/security/advisories/GHSA-m837-g268-mmv7
- https://nvd.nist.gov/vuln/detail/CVE-2025-54369
- https://github.com/node-saml/node-saml/commit/31ead9411ebc3e2385086fa9149b6c17732bca10
- https://github.com/node-saml/node-saml
- https://github.com/node-saml/node-saml/releases/tag/v5.1.0
CVE-2025-54369 · published · modified · JSON