Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/samlify@2.4.0-rc5
purl pkg:npm/samlify@2.4.0-rc5
Next non-vulnerable version 2.10.0
Latest non-vulnerable version 2.13.0
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-b1nj-59yn-suat
Aliases:
CVE-2025-47949
GHSA-r683-v43c-6xqv
2.10.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-1f7b-kkkz-2keq XPath Injection An XML Signature Wrapping vulnerability exists in Samlify which could allow attackers to impersonate arbitrary users. CVE-2017-1000452
GHSA-8jjf-w7j6-323c

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T08:41:05.735167+00:00 GitLab Importer Affected by VCID-b1nj-59yn-suat https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/samlify/CVE-2025-47949.yml 38.6.0
2026-05-31T11:17:33.796545+00:00 GithubOSV Importer Fixing VCID-1f7b-kkkz-2keq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/01/GHSA-8jjf-w7j6-323c/GHSA-8jjf-w7j6-323c.json 38.6.0
2026-05-31T00:50:08.494159+00:00 GHSA Importer Fixing VCID-1f7b-kkkz-2keq https://github.com/advisories/GHSA-8jjf-w7j6-323c 38.6.0