Search for packages
| purl | pkg:composer/simplesamlphp/saml2@4.6.14 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fqhw-vnhk-j7fu
Aliases: CVE-2025-27773 GHSA-46r4-f8gj-xg56 |
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to accept an unsigned message. Versions 4.17.0 and 5.0.0-alpha.20 contain a fix for the issue. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4ghf-nbrc-m7e2 | SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18. |
CVE-2024-52806
GHSA-pxm4-r5ph-q2m2 |
| VCID-8qrc-1cx7-zuac | SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0. |
CVE-2024-52596
GHSA-2x65-fpch-2fcm |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T19:54:33.485600+00:00 | GitLab Importer | Affected by | VCID-fqhw-vnhk-j7fu | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/simplesamlphp/saml2/CVE-2025-27773.yml | 38.6.0 |
| 2026-06-12T19:47:42.858838+00:00 | GitLab Importer | Fixing | VCID-8qrc-1cx7-zuac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/simplesamlphp/saml2/CVE-2024-52596.yml | 38.6.0 |
| 2026-06-12T19:47:35.339501+00:00 | GitLab Importer | Fixing | VCID-4ghf-nbrc-m7e2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/simplesamlphp/saml2/CVE-2024-52806.yml | 38.6.0 |
| 2026-06-12T07:41:37.777954+00:00 | GithubOSV Importer | Fixing | VCID-4ghf-nbrc-m7e2 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-pxm4-r5ph-q2m2/GHSA-pxm4-r5ph-q2m2.json | 38.6.0 |