Advisories · Technology
krakenjs passport-saml-encrypted.
Every CVE that names krakenjs passport-saml-encrypted among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending
- krakenjs passport-saml-encrypted
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
- krakenjs passport-saml-encrypted
- Weak cryptography or TLS