lightsaml vulnerabilities

CVEs whose affected-version data names the lightsaml package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63182High· 8.1PoC

1w ago

LightSAML: Signature reference wrapping permits unsigned assertion claims

LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate support, and message bindings. Prior to 4.7.1 and 5.0.1, LightSAML and xmlseclibs disagree about which assertion an inboun…

▾ Midnightlitesaml · lightsamlEPSS 0.19%via CVEORG