Hex/samly CVE-2026-53424: critical 9.1, EPSS 0.60%

Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: EEF-CVE-2026-53424
• nvd: CVE-2026-53424
• https://cna.erlef.org/cves/CVE-2026-53424.html
• https://hex.pm/packages/samly

CVE-2026-53424 · published 2026-08-20T17:27:11.115Z · modified 2026-09-08T05:30:36.653017365Z · JSON