CVE-2021-39171
1 advisory.
npm/passport-saml CVE-2021-39171: medium 5.3, EPSS 1.32%
Unlimited transforms allowed for signed nodes
Action: Upgrade passport-saml to 3.1.0 or later.
npm i passport-saml@3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-5379-r78w-42h2
- https://github.com/node-saml/passport-saml/security/advisories/GHSA-5379-r78w-42h2
- https://nvd.nist.gov/vuln/detail/CVE-2021-39171
- https://github.com/node-saml/passport-saml/pull/595
- https://github.com/node-saml/passport-saml/commit/f1e00b64c21a725f545e675cd810bbaa435a3972
- https://github.com/node-saml/passport-saml
CVE-2021-39171 · published · modified · JSON