Hex/samly CVE-2026-53425: high 7.6, EPSS 0.22%
Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: EEF-CVE-2026-53425
- nvd: CVE-2026-53425
- https://cna.erlef.org/cves/CVE-2026-53425.html
- https://hex.pm/packages/samly
CVE-2026-53425 · published · modified · JSON