Passport Saml

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-39299 Oct 12, 21:15 npm HIGH PATCH This Week

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Node.js Jwt Attack Passport Saml

NVD GitHub

CVSS 3.1

8.1

EPSS

3.0%

CVE-2021-39171 Aug 27, 22:15 npm HIGH PATCH This Week

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Node.js Passport Saml

NVD GitHub

CVSS 3.1

7.5

EPSS

1.3%

CVE-2022-39299 npm

EPSS 3% CVSS 8.1

HIGH PATCH This Week

Authentication Bypass Node.js Jwt Attack +1

NVD GitHub

CVE-2021-39171 npm

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Node.js Passport Saml

NVD GitHub