npm/@node-saml/node-saml CVE-2025-54369: critical, EPSS 0.55%
Node-SAML SAML Authentication Bypass
Action: Upgrade @node-saml/node-saml to 5.1.0 or later.
npm i @node-saml/node-saml@5.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.0 | - |
Fixed versions
| 5.1.0 |
Sources
- osv: GHSA-m837-g268-mmv7#npm/@node-saml/node-saml
- https://github.com/node-saml/node-saml/security/advisories/GHSA-m837-g268-mmv7
- https://nvd.nist.gov/vuln/detail/CVE-2025-54369
- https://github.com/node-saml/node-saml/commit/31ead9411ebc3e2385086fa9149b6c17732bca10
- https://github.com/node-saml/node-saml
- https://github.com/node-saml/node-saml/releases/tag/v5.1.0
CVE-2025-54369 · published · modified · JSON