Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

esaml

4 known vulnerabilities (3 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 high, 1 medium
Registry
Hex

Advisories 4

  • Unbounded SAML message decompression in esaml allows memory exhaustion

    Affected: from 0.1.0.

  • Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion

    Affected: from 0.1.0.

  • Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion

    Affected: from 0.1.0.

  • CVE-2026-28809Medium 6.3

    XXE in esaml SAML library allows local file read and potential SSRF

    Affected: version range not reported; through 4.6.0; all versions.