{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/55067?format=json","vulnerability_id":"VCID-96db-3jav-tkay","summary":"SimpleSAMLphp Reflected Cross-site Scripting vulnerability\nWhen sending a SAML message to another entity, SimpleSAMLphp will use the URL of the appropriate endpoint to redirect the user’s browser to it, or craft a form that will be automatically posted to it, depending on the SAML binding used. The URL that’s target of the message is fetched from the stored metadata for the given entity, and that metadata is trusted as correct.\n\nHowever, if that metadata has been altered by a malicious party (either an attacker or a rogue administrator) to substitute the URLs of the endpoints with javascript code, SimpleSAMLphp was blindly using them without any validation, trusting the contents of the metadata. This would lead to a reflected XSS where the javascript code is sent inline to the web browser, and if SimpleSAMLphp is not using a strict Content Security Policy to forbid inline javascript (which is the case of the default user interface), then the code will be executed in the end user’s browser.","aliases":[{"alias":"GHSA-vpr3-cw3h-prw8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81656?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-8w1y-praq-2bb2"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-pecs-5zkn-6qfq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.3"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/54605?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.12.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.12.0"},{"url":"http://public2.vulnerablecode.io/api/packages/204217?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/204218?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/204219?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.13.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.0"},{"url":"http://public2.vulnerablecode.io/api/packages/204220?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.13.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.1"},{"url":"http://public2.vulnerablecode.io/api/packages/204221?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.13.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.2"},{"url":"http://public2.vulnerablecode.io/api/packages/204222?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/54044?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-jv7n-m3cf-jfex"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.0"},{"url":"http://public2.vulnerablecode.io/api/packages/53258?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.1"},{"url":"http://public2.vulnerablecode.io/api/packages/204223?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.2"},{"url":"http://public2.vulnerablecode.io/api/packages/204224?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2etk-v7gt-pqhn"},{"vulnerability":"VCID-3d8m-wtww-2yah"},{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-j3sv-ccme-rbdn"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.3"},{"url":"http://public2.vulnerablecode.io/api/packages/52749?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.4"},{"url":"http://public2.vulnerablecode.io/api/packages/208870?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.5"},{"url":"http://public2.vulnerablecode.io/api/packages/208871?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.6"},{"url":"http://public2.vulnerablecode.io/api/packages/208872?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.7"},{"url":"http://public2.vulnerablecode.io/api/packages/208873?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.8"},{"url":"http://public2.vulnerablecode.io/api/packages/208874?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.9"},{"url":"http://public2.vulnerablecode.io/api/packages/54041?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-b3fn-bnh5-qyg4"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-d1d1-jng1-4fe6"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.10"},{"url":"http://public2.vulnerablecode.io/api/packages/53290?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-dgs2-3xbu-c3ff"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-k5d6-k216-8ub8"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.11"},{"url":"http://public2.vulnerablecode.io/api/packages/54042?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-dvwj-zd42-nbhe"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.12"},{"url":"http://public2.vulnerablecode.io/api/packages/54043?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-va8h-3qxg-uqh2"},{"vulnerability":"VCID-yn8q-d76k-q3h2"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.13"},{"url":"http://public2.vulnerablecode.io/api/packages/54012?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-gwtm-bdae-3ufj"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.14"},{"url":"http://public2.vulnerablecode.io/api/packages/54013?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-pskx-9d46-bfdt"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.15"},{"url":"http://public2.vulnerablecode.io/api/packages/54985?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-cmqz-hp34-8kcx"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-mfwu-mfhq-fkh8"},{"vulnerability":"VCID-ugw3-xgan-k3fm"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.16"},{"url":"http://public2.vulnerablecode.io/api/packages/54606?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.14.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.17"},{"url":"http://public2.vulnerablecode.io/api/packages/151155?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/215752?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.0-rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.0-rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/215753?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.0-rc3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.0-rc3"},{"url":"http://public2.vulnerablecode.io/api/packages/215754?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.0"},{"url":"http://public2.vulnerablecode.io/api/packages/215755?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4gux-4jrc-w7ce"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-ywuy-my3f-x7cd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.1"},{"url":"http://public2.vulnerablecode.io/api/packages/54979?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.2"},{"url":"http://public2.vulnerablecode.io/api/packages/238689?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.3"},{"url":"http://public2.vulnerablecode.io/api/packages/238690?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.15.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.15.4"},{"url":"http://public2.vulnerablecode.io/api/packages/238691?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.16.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.16.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/57203?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.16.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5t1x-6vzm-qua9"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-fxvv-9aj6-pkf9"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.16.0"},{"url":"http://public2.vulnerablecode.io/api/packages/229263?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.16.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5t1x-6vzm-qua9"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-fxvv-9aj6-pkf9"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.16.1"},{"url":"http://public2.vulnerablecode.io/api/packages/229264?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.16.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5t1x-6vzm-qua9"},{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-fxvv-9aj6-pkf9"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.16.2"},{"url":"http://public2.vulnerablecode.io/api/packages/57204?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.16.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.16.3"},{"url":"http://public2.vulnerablecode.io/api/packages/229265?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/238692?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.0-rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.0-rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/238693?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.0-rc3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-d1cm-xhdp-8qhv"},{"vulnerability":"VCID-hhq1-kxga-87ea"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.0-rc3"},{"url":"http://public2.vulnerablecode.io/api/packages/58293?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-8w1y-praq-2bb2"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-pecs-5zkn-6qfq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.0"},{"url":"http://public2.vulnerablecode.io/api/packages/244767?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-8w1y-praq-2bb2"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-pecs-5zkn-6qfq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.1"},{"url":"http://public2.vulnerablecode.io/api/packages/244768?format=json","purl":"pkg:composer/simplesamlphp/simplesamlphp@1.17.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6fwf-1xps-t7g5"},{"vulnerability":"VCID-8w1y-praq-2bb2"},{"vulnerability":"VCID-96db-3jav-tkay"},{"vulnerability":"VCID-hhq1-kxga-87ea"},{"vulnerability":"VCID-pecs-5zkn-6qfq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.17.2"}],"references":[{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/2019-07-10.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/2019-07-10.yaml"},{"reference_url":"https://github.com/simplesamlphp/simplesamlphp","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/simplesamlphp/simplesamlphp"},{"reference_url":"https://github.com/simplesamlphp/simplesamlphp/commit/ce2294e092b3be7db2fc4e18e774b791d4564ff3","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/simplesamlphp/simplesamlphp/commit/ce2294e092b3be7db2fc4e18e774b791d4564ff3"},{"reference_url":"https://simplesamlphp.org/security/201907-01","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://simplesamlphp.org/security/201907-01"},{"reference_url":"https://github.com/advisories/GHSA-vpr3-cw3h-prw8","reference_id":"GHSA-vpr3-cw3h-prw8","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vpr3-cw3h-prw8"}],"weaknesses":[{"cwe_id":79,"name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-96db-3jav-tkay"}