Login Request a demo
PA
Product
passport-wsfed-saml2
by auth0 · last CVE May 6, 2025
4
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities4Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add passport-wsfed-saml2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-46572
9.3
0%
May 6
passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping
Affected: >= 3.0.5, < 4.6.4
CVE-2025-46573
8.6
0%
May 6
passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling
Affected: >= 3.0.5, < 4.6.4
CVE-2017-16897
8.1
1%
Dec 27
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5
Affected: before 3.0.5
CVE-2022-23505
7.5
1%
Dec 13
Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication
Affected: < 4.6.3
Showing 4