Node Saml

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-40178 npm MEDIUM PATCH This Month

Node-SAML is a SAML library not dependent on any frameworks that runs in Node. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Jwt Attack Node Saml

NVD GitHub

CVSS 3.1

5.3

EPSS

0.4%

CVE-2022-39300 npm HIGH PATCH This Week

node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Jwt Attack Node Saml

NVD GitHub

CVSS 3.1

8.1

EPSS

0.6%

CVE-2023-40178 npm

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Jwt Attack Node Saml

NVD GitHub

CVE-2022-39300 npm

EPSS 1% CVSS 8.1

HIGH PATCH This Week

node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Jwt Attack Node Saml

NVD GitHub