Nnode-saml

Products

Exploited and recent CVEs

• CVE-2025-54369 Critical 9.3 Node-SAML SAML Authentication Bypass 0.5%
• CVE-2025-54419 Critical 10.0 Node-SAML Contains SAML Signature Verification Vulnerability 0.4%
• CVE-2025-29775 Critical 9.3 xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment 10.1%
• CVE-2025-29774 Critical 9.3 xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References 9.1%
• CVE-2024-32962 Critical 10.0 XML signature verification bypass due improper verification of signature / signature spoofing 0.8%
• CVE-2023-40178 Medium 5.3 @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError 0.5%
• CVE-2022-39300 High 7.7 Signature bypass via multiple root elements in node-SAML 0.8%
• CVE-2022-39299 High 7.4 Signature bypass via multiple root elements in Passport-SAML 4.5%
• CVE-2021-39171 Medium 5.3 Unlimited transforms allowed for signed nodes 1.3%