{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.23.0"}],"component":"Kentor.AuthServices","cve_ids":["CVE-2023-41890"],"ecosystem":"NuGet","epss":0.00752,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fv2h-753j-9g39","id":"tcs_01M5N8N1Q9EK5X39SRXMJQ5WVW","modified_at":"2024-10-14T18:39:06.970209Z","published_at":"2023-09-20T23:01:52Z","references":["https://osv.dev/vulnerability/GHSA-fv2h-753j-9g39","https://github.com/Sustainsys/Saml2/security/advisories/GHSA-fv2h-753j-9g39","https://nvd.nist.gov/vuln/detail/CVE-2023-41890","https://github.com/Sustainsys/Saml2/issues/712","https://github.com/Sustainsys/Saml2/issues/713","https://github.com/Sustainsys/Saml2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fv2h-753j-9g39#NuGet/Kentor.AuthServices","url":"https://osv.dev/vulnerability/GHSA-fv2h-753j-9g39"}],"summary":"Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation"}