Go/github.com/ssoready/ssoready CVE-2024-47832: critical 9.8, EPSS 0.40%
XML Signature Bypass via differential XML parsing in ssoready in github.com/ssoready/ssoready
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3185
- nvd: CVE-2024-47832
- https://github.com/ssoready/ssoready/commit/7f92a0630439972fcbefa8c7eafe8c144bd89915
- https://github.com/ssoready/ssoready/security/advisories/GHSA-j2hr-q93x-gxvh
- https://ssoready.com/docs/self-hosting/self-hosting-sso-ready
CVE-2024-47832 · published · modified · JSON