{"items":[{"id":"CVE-2025-54369","published":"2025-12-12T23:03:52.427Z","updated":"2026-05-07T20:46:21.508Z","title":"Node-SAML SAML Authentication Bypass","severity":"CRITICAL","score":9.3,"vendor":"node-saml","product":"node-saml","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2025-54419","published":"2025-07-28T19:47:46.584Z","updated":"2025-07-28T20:39:07.897Z","title":"Node-SAML Contains SAML Signature Verification Vulnerability","severity":"CRITICAL","score":10,"vendor":"node-saml","product":"node-saml","kev":false,"epss":0.00379,"kevAdded":null},{"id":"CVE-2025-29775","published":"2025-03-14T17:11:05.590Z","updated":"2025-03-15T20:45:45.927Z","title":"xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment","severity":"CRITICAL","score":9.3,"vendor":"node-saml","product":"xml-crypto","kev":false,"epss":0.10141,"kevAdded":null},{"id":"CVE-2025-29774","published":"2025-03-14T17:05:53.943Z","updated":"2025-03-15T20:50:21.614Z","title":"xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References","severity":"CRITICAL","score":9.3,"vendor":"node-saml","product":"xml-crypto","kev":false,"epss":0.09103,"kevAdded":null},{"id":"CVE-2024-32962","published":"2024-05-02T06:48:55.906Z","updated":"2025-02-13T17:52:18.895Z","title":"XML signature verification bypass due improper verification of signature / signature spoofing","severity":"CRITICAL","score":10,"vendor":"node-saml","product":"xml-crypto","kev":false,"epss":0.00833,"kevAdded":null},{"id":"CVE-2023-40178","published":"2023-08-23T20:15:23.057Z","updated":"2024-10-02T18:56:08.820Z","title":"@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError","severity":"MEDIUM","score":5.3,"vendor":"node-saml","product":"node-saml","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2022-39300","published":"2022-10-13T00:00:00.000Z","updated":"2025-04-23T16:50:20.803Z","title":"Signature bypass via multiple root elements in node-SAML","severity":"HIGH","score":7.7,"vendor":"node-saml","product":"node-saml","kev":false,"epss":0.00782,"kevAdded":null},{"id":"CVE-2022-39299","published":"2022-10-12T00:00:00.000Z","updated":"2025-04-23T16:51:09.032Z","title":"Signature bypass via multiple root elements in Passport-SAML","severity":"HIGH","score":7.4,"vendor":"node-saml","product":"passport-saml","kev":false,"epss":0.04494,"kevAdded":null},{"id":"CVE-2021-39171","published":"2021-08-27T22:05:11.000Z","updated":"2024-08-04T01:58:18.150Z","title":"Unlimited transforms allowed for signed nodes","severity":"MEDIUM","score":5.3,"vendor":"node-saml","product":"passport-saml","kev":false,"epss":0.01323,"kevAdded":null}]}