- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 critical, 2 high
- Weekly downloads
- 2,665
- Dependents
- 0
- Registry
- npm
Advisories 3
- CVE-2025-54369Critical 9.3
Node-SAML SAML Authentication Bypass
Affected: through 3.1.2.
- CVE-2022-39300High 7.7
Signature bypass via multiple root elements in node-SAML
Affected: fixed in 4.0.0-beta.5.
- CVE-2022-39299High 7.4
Signature bypass via multiple root elements in Passport-SAML
Affected: fixed in 4.0.0-beta.5.