{"action":"Upgrade saml2-js to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"0"}],"component":"saml2-js","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-mfcp-34xw-p57x","id":"tcs_01M5KG0J8T3N8Z5JBCGYE6S2W7","modified_at":"2021-09-29T20:12:42Z","published_at":"2020-09-03T21:20:52Z","references":["https://osv.dev/vulnerability/GHSA-mfcp-34xw-p57x","https://github.com/Clever/saml2/pull/190","https://github.com/Clever/saml2/commit/ae0da4d0a0ea682a737be481e3bd78798be405c0","https://github.com/Clever/saml2","https://snyk.io/vuln/SNYK-JS-SAML2JS-474637","https://www.npmjs.com/advisories/1222"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-mfcp-34xw-p57x","url":"https://osv.dev/vulnerability/GHSA-mfcp-34xw-p57x"}],"summary":"Authentication Bypass in saml2-js"}