{"action":"Upgrade Sustainsys.Saml2 to 1.0.3 (1.x) or 2.9.2 (2.x) or later.","affected":[{"fixed":"1.0.3","introduced":"0"},{"fixed":"2.9.2","introduced":"2.0.0"}],"component":"Sustainsys.Saml2","cve_ids":["CVE-2023-41890"],"ecosystem":"NuGet","epss":0.00752,"exploited":false,"fixed_versions":["1.0.3","2.9.2"],"ghsa_id":"GHSA-fv2h-753j-9g39","id":"tcs_01M5N8N1GXG0ENWJ5SQ2EM7BMN","modified_at":"2024-10-14T18:39:06.970209Z","published_at":"2023-09-20T23:01:52Z","references":["https://osv.dev/vulnerability/GHSA-fv2h-753j-9g39","https://github.com/Sustainsys/Saml2/security/advisories/GHSA-fv2h-753j-9g39","https://nvd.nist.gov/vuln/detail/CVE-2023-41890","https://github.com/Sustainsys/Saml2/issues/712","https://github.com/Sustainsys/Saml2/issues/713","https://github.com/Sustainsys/Saml2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fv2h-753j-9g39","url":"https://osv.dev/vulnerability/GHSA-fv2h-753j-9g39"}],"summary":"Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation"}