What’s Vulnerable › Products

auth0 passport-wsfed-saml2 vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your auth0 passport-wsfed-saml2 version is affected

Latest auth0 passport-wsfed-saml2 vulnerabilities

• CVE-2025-46573 — passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling (CVSS 8.6)
• CVE-2025-46572 — passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping (CVSS 9.3)
• CVE-2022-23505 — Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication (CVSS 7.5)
• CVE-2017-16897 — (CVSS 8.1)