What’s Vulnerable › Products

node-saml vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your node-saml version is affected

Latest node-saml vulnerabilities

• CVE-2025-54419 — Node-SAML Contains SAML Signature Verification Vulnerability (CVSS 10.0)
• CVE-2025-54369 — Node-SAML SAML Authentication Bypass (CVSS 9.3)
• CVE-2023-40178 — @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError (CVSS 5.3)
• CVE-2022-39300 — Signature bypass via multiple root elements in node-SAML (CVSS 8.1)