Vulnerabilidades do Krakenjs Passport-saml-encrypted
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Krakenjs Passport-saml-encrypted: 2 registro(s), com versões afetadas e correções.
CVE-2026-89043
Alta · 7.4
CWE-347 10/09/2026
passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending
passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets accepted as the verified identity while the genuine signature validates against the original assertion.
CVE-2026-89042
Crítica · 9.1
CWE-347 10/09/2026
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID and attributes to the assertion consumer service endpoint to receive authenticated profiles without valid signatures.