tocsin

CVE-2025-54419

3 advisories.

npm/@node-saml/node-saml CVE-2025-54419: critical 10, EPSS 0.36%

Node-SAML SAML Signature Verification Vulnerability

Action: Upgrade @node-saml/node-saml to 5.1.0 or later.

npm i @node-saml/node-saml@5.1.0

Affected

introducedfixedlast affected
05.1.0-

Fixed versions

5.1.0

Sources

CVE-2025-54419 · published · modified · JSON

npm/passport-saml CVE-2025-54419: critical 10, EPSS 0.36%

Node-SAML SAML Signature Verification Vulnerability

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-3.2.4

Fixed versions

No fixed version in the source.

Sources

CVE-2025-54419 · published · modified · JSON

npm/@node-saml/passport-saml CVE-2025-54419: critical 10, EPSS 0.36%

Node-SAML SAML Signature Verification Vulnerability

Action: Upgrade @node-saml/passport-saml to 5.1.0 or later.

npm i @node-saml/passport-saml@5.1.0

Affected

introducedfixedlast affected
05.1.0-

Fixed versions

5.1.0

Sources

CVE-2025-54419 · published · modified · JSON