What’s Vulnerable › Products

dropbox esaml vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your dropbox esaml version is affected

Latest dropbox esaml vulnerabilities

• CVE-2026-93471 — Unbounded SAML message decompression in esaml allows memory exhaustion (CVSS 8.7)
• CVE-2026-86696 — Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion (CVSS 8.2)
• CVE-2026-105270 — Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion (CVSS 8.7)
• CVE-2026-28809 — XXE in esaml SAML library allows local file read and potential SSRF (CVSS 5.3)