{"action":"Upgrade github.com/crewjam/saml to 0.4.13 or later.","affected":[{"fixed":"0.4.13","introduced":"0"}],"component":"github.com/crewjam/saml","cve_ids":["CVE-2023-28119"],"ecosystem":"Go","epss":0.00957,"exploited":false,"fixed_versions":["0.4.13"],"ghsa_id":"GHSA-5mqj-xc49-246p","id":"tcs_01M5KFYZ0425DQ6BRVCQ6HBZ47","modified_at":"2026-08-07T08:12:30.812086276Z","published_at":"2023-08-23T14:38:10Z","references":["https://osv.dev/vulnerability/GO-2023-1664","https://github.com/crewjam/saml/security/advisories/GHSA-5mqj-xc49-246p","https://github.com/crewjam/saml/commit/8e9236867d176ad6338c870a84e2039aef8a5021"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1664","url":"https://osv.dev/vulnerability/GO-2023-1664"}],"summary":"Denial of service via deflate compression bomb in github.com/crewjam/saml"}