Threats tagged 'ghsa-vw3m-3x7w-24g8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2026-89042krakenjs passport-saml-encrypted · Improper Verification of Cryptographic Signature Critical9.3EPSS 0.4%2026-09-10CVE Database V5CVE-2026-89042 CVE-2026-89042 affects the krakenjs passport-saml-encrypted library up to version 0.1.13. The vulnerability allows attackers to bypass authentication by submitting unsigned SAML responses because signature verification depends on an optional certificate configuration. This enables attackers to forge SAML responses with arbitrary user attributes and gain authenticated profiles without valid signatures. EPSS 0.4%Vulnerability krakenjs #ghsa-vw3m-3x7w-24g8	CVE Database V5	2026-09-10

Page 1 of 1