Threat Intelligence Database

CVE-2026-93471 is a high-severity vulnerability in the esaml library used by handnot2. It involves improper handling of highly compressed SAMLResponse data, allowing an unauthenticated attacker to cause a denial-of-service by exhausting server memory and crashing the Erlang VM. The vulnerability arises because the esaml_binding:decode_response/2 function decompresses attacker-controlled input without limiting output size, leading to extreme data amplification. This occurs before any signature verification and affects the SAML consume and single-logout endpoints, which accept unauthenticated requests by design. Versions from 0.1.0 onward are affected.

CVE-2026-86696 is a high-severity vulnerability in the esaml library of the handnot2 project. It allows an unauthenticated attacker to exhaust the Erlang VM atom table by sending unsigned LogoutResponse messages with many distinct status codes. This leads to a denial-of-service by crashing the Erlang node. The vulnerability arises because esaml converts unrecognized StatusCode values into atoms without limits, and atoms are never reclaimed. The issue affects esaml versions from 0.1.0 onward.

CVE-2026-105270 is a high-severity vulnerability in the arekinath esaml library affecting versions 0.1.0 and later. It involves allocation of resources without limits or throttling in the esaml_binding component, allowing unauthenticated attackers to exhaust the Erlang VM atom table and crash the node by sending crafted SAMLResponse messages. The vulnerability arises because the SAMLResponse is parsed with xmerl_scan:string/2, which interns XML element and attribute names as permanent atoms that are never reclaimed. Since the SAML consume and single-logout endpoints process these requests before signature verification, an attacker can cause a denial of service by exhausting the atom table with relatively small requests. No patch or remediation information is provided in the source data.