- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 4 high
- Registry
- Packagist
Advisories 4
- CVE-2026-49289High 7.5
SimpleSAMLphp SAML2: Possible DoS via XPath Transform
Affected: from 4.20.0, fixed in 4.20.3; fixed in 4.19.3.
- CVE-2026-49283High 8.7
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
Affected: from 4.20.0, fixed in 4.20.2; fixed in 4.19.3.
- CVE-2025-27773High 8.6
SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding
Affected: fixed in 4.17.0.
- CVE-2024-52806High 8.3
SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
Affected: fixed in 4.6.14.