{"action":"Upgrade passport-wsfed-saml2 to 3.0.10 or later.","affected":[{"fixed":"3.0.10","introduced":"0"}],"component":"passport-wsfed-saml2","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.0.10"],"ghsa_id":"GHSA-5wrg-8fxp-cx9r","id":"tcs_01M5KF4Z6MY04WFTDZTAPA3JXY","modified_at":"2023-06-21T22:06:22Z","published_at":"2023-06-21T22:06:22Z","references":["https://osv.dev/vulnerability/GHSA-5wrg-8fxp-cx9r","https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-5wrg-8fxp-cx9r","https://github.com/auth0/passport-wsfed-saml2/pull/79","https://github.com/auth0/passport-wsfed-saml2/commit/f75211d42d2586a0d24a9da29ba8590e42363500","https://github.com/auth0/passport-wsfed-saml2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-5wrg-8fxp-cx9r","url":"https://osv.dev/vulnerability/GHSA-5wrg-8fxp-cx9r"}],"summary":"passport-wsfed-saml2 Signature Bypass vulnerability"}