{"action":"Upgrade drupal/miniorange_saml to 3.1.4 or later.","affected":[{"fixed":"3.1.4","introduced":"0"}],"component":"drupal/miniorange_saml","cve_ids":["CVE-2026-5343"],"ecosystem":"Packagist","ecosystem_qualifier":"Packagist:https://packages.drupal.org/8","epss":0.00257,"exploited":false,"fixed_versions":["3.1.4"],"id":"tcs_01M5MF8BRY13TA0N7AG132E3V0","modified_at":"2026-09-10T03:45:58.562115577Z","published_at":"2026-04-01T16:38:14Z","references":["https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-031","https://www.drupal.org/sa-contrib-2026-031"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DRUPAL-CONTRIB-2026-031","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-031"},{"source":"nvd","source_id":"CVE-2026-5343","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5343"}],"summary":"This module enables you to perform SAML-protocol-based single-sign-on (SSO) on a Drupal site."}