{"action":"Upgrade gogentooss/samlbase to 1.2.7 or later.","affected":[{"fixed":"1.2.7","introduced":"0"}],"component":"gogentooss/samlbase","cve_ids":["CVE-2018-5387"],"ecosystem":"Packagist","epss":0.0166,"exploited":false,"fixed_versions":["1.2.7"],"ghsa_id":"GHSA-7gh2-8q93-87hp","id":"tcs_01M5KEY2G0RCAFK9JG2SGGSG3H","modified_at":"2024-02-16T08:25:14.282608Z","published_at":"2022-05-13T01:02:57Z","references":["https://osv.dev/vulnerability/GHSA-7gh2-8q93-87hp","https://nvd.nist.gov/vuln/detail/CVE-2018-5387","https://github.com/GoGentoOSS/SAMLBase/issues/3","https://github.com/GoGentoOSS/SAMLBase/commit/482cdf8c090e0f1179073034ebcb609ac7c3f5b3","https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations","https://github.com/GoGentoOSS/SAMLBase","https://www.kb.cert.org/vuls/id/475445"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7gh2-8q93-87hp","url":"https://osv.dev/vulnerability/GHSA-7gh2-8q93-87hp"}],"summary":"Wizkunde SAMLBase SAML Bypass"}