{"action":"Upgrade @node-saml/node-saml to 4.0.5 or later.","affected":[{"fixed":"4.0.5","introduced":"0"}],"component":"@node-saml/node-saml","cve_ids":["CVE-2023-40178"],"ecosystem":"npm","epss":0.00491,"exploited":false,"fixed_versions":["4.0.5"],"ghsa_id":"GHSA-vx8m-6fhw-pccw","id":"tcs_01M5KGD8MEYTX6Y8K9RQPYJ2JR","modified_at":"2026-09-10T03:49:57.758207788Z","published_at":"2023-08-21T20:13:05Z","references":["https://osv.dev/vulnerability/GHSA-vx8m-6fhw-pccw","https://github.com/node-saml/node-saml/security/advisories/GHSA-vx8m-6fhw-pccw","https://nvd.nist.gov/vuln/detail/CVE-2023-40178","https://github.com/node-saml/node-saml/commit/045e3b9c54211fdb95f96edf363679845b195cec","https://github.com/node-saml/node-saml","https://github.com/node-saml/node-saml/releases/tag/v4.0.5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vx8m-6fhw-pccw","url":"https://osv.dev/vulnerability/GHSA-vx8m-6fhw-pccw"}],"summary":"@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError"}