Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

drupal/miniorange_saml

13 known vulnerabilities (1 high, 7 medium, 5 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
13 · 1 high, 7 medium, 5 low
Registry
Packagist

Advisories 13

  • CVE-2026-87943Medium 6.5

    SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141

    Affected: fixed in 3.2.0.

  • CVE-2026-87944Medium 4.8

    SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142

    Affected: fixed in 3.2.0.

  • CVE-2026-87945Medium 5.4

    SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143

    Affected: fixed in 3.2.0.

  • CVE-2026-87946Medium 4.8

    SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144

    Affected: fixed in 3.2.0.

  • CVE-2026-87947Medium 4.8

    SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145

    Affected: fixed in 3.2.0.

  • SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146

    Affected: fixed in 3.2.0.

  • SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147

    Affected: fixed in 3.2.0.

  • CVE-2026-87950Medium 5.3

    SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148

    Affected: fixed in 3.2.0.

  • SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149

    Affected: fixed in 3.2.0.

  • SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150

    Affected: fixed in 3.2.0.

  • SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151

    Affected: fixed in 3.2.0.

  • SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031

    Affected: fixed in 3.1.4.

  • CVE-2026-3217Medium 6.1

    SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018

    Affected: fixed in 3.1.3.