CVE-2022-39300
1 advisory.
npm/node-saml CVE-2022-39300: high 8.1
Signature bypass via multiple root elements
Action: Upgrade node-saml to 4.0.0-beta.5 or later.
npm i node-saml@4.0.0-beta.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0-beta.5 | - |
Fixed versions
| 4.0.0-beta.5 |
Sources
- osv: GHSA-5p8w-2mvw-38pv
- https://github.com/node-saml/node-saml/security/advisories/GHSA-5p8w-2mvw-38pv
- https://nvd.nist.gov/vuln/detail/CVE-2022-39300
- https://github.com/node-saml/node-saml/commit/c1f275c289c01921e58f5c70ce0fdbc5287e5fbe
- https://github.com/node-saml/node-saml
CVE-2022-39300 · published · modified · JSON