Debian/simplesamlphp: high 7.5
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. In 4.19.2 and 4.20.2, the library permits attacker-controlled XPath transforms while processing XML signatures in spec
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2026-49289#Debian:14/simplesamlphp
- https://security-tracker.debian.org/tracker/CVE-2026-49289
published · modified · JSON