{"action":"Upgrade simplesamlphp/saml2 to 4.6.14 or later.","affected":[{"fixed":"4.6.14","introduced":"0"}],"component":"simplesamlphp/saml2","cve_ids":["CVE-2024-52806"],"ecosystem":"Packagist","epss":0.00432,"exploited":false,"fixed_versions":["4.6.14"],"ghsa_id":"GHSA-pxm4-r5ph-q2m2","id":"tcs_01M5KF6T3G8NMBZVS9CX2XPDXS","modified_at":"2024-12-13T20:51:55.673390Z","published_at":"2024-12-02T17:25:43Z","references":["https://osv.dev/vulnerability/GHSA-pxm4-r5ph-q2m2","https://github.com/simplesamlphp/saml2/security/advisories/GHSA-pxm4-r5ph-q2m2","https://nvd.nist.gov/vuln/detail/CVE-2024-52806","https://github.com/simplesamlphp/saml2/commit/5fd4ce4596656fb0c1278f15b8305825412e89f7","https://github.com/simplesamlphp/saml2"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-pxm4-r5ph-q2m2","url":"https://osv.dev/vulnerability/GHSA-pxm4-r5ph-q2m2"}],"summary":"SimpleSAMLphp SAML2 has an XXE in parsing SAML messages"}