Russellhaering Gosaml2 vulnerabilities

1 known vulnerability affecting russellhaering/gosaml2.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-26483MEDIUMCVSS 5.3fixed in 0.9.02023-03-03

CVE-2023-26483 [MEDIUM] CWE-409 CVE-2023-26483: gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML authentication support are likely susceptible to Denial of Service attacks. A bug in this library enables attackers to craft a `deflate`-compressed request which will consume significantly more memory during processing than the size of the original req