Krakenjs vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Krakenjs products: 2 record(s), with severity, exploitation and fixes.

Passport-saml-encrypted 2

Exploited only (KEV) →

CVE-2026-89043 High · 7.4 CWE-347 Sep 10, 2026

passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets accepted as the verified identity while the genuine signature validates against the original assertion.

CVE-2026-89042 Critical · 9.1 CWE-347 Sep 10, 2026

passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification

passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID and attributes to the assertion consumer service endpoint to receive authenticated profiles without valid signatures.