GHSA-34r5-q4jw-r36m
NoneCVSS
—
EPSS
—
Published
May 21, 2026
CISA due date
—
The record
samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | samlify | 0 | 2.13.0 |
Related vulnerabilities
- CVE-2026-46490 samlify is a Node.js library for SAML single sign-on. Same vulnerability
- CVE-2026-2310 IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML… CWE-91
- CVE-2026-83617 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-91
- CVE-2026-83616 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-91
- CVE-2026-83618 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-91
- CVE-2026-83608 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-91
- CVE-2026-83605 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-91
- CVE-2026-83607 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-91