VulertSecurity VulertSecurity

Vulnerability Database · Go · github.com/crewjam/saml · Version

github.com/crewjam/saml v0.4.7-0.20220105150955-e007e418a04d

v0.4.7-0.20220105150955-e007e418a04d is affected by 10 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: v0.5.1.

Critical 2 High 2 Medium 0 Low 0 Unrated 6

All github.com/crewjam/saml versions & vulnerabilities → Source repository Search the database for this package →
Released 05 Jan 2022 Licence BSD-2-Clause Also known from other sources 6 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

github.com/crewjam/saml v0.4.7-0.20220105150955-e007e418a04d vulnerabilities

10 vulnerabilities cover github.com/crewjam/saml v0.4.7-0.20220105150955-e007e418a04d. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2020-27846: XML Processing error in github.com/crewjam/saml 9.8 critical 0.4.3 23 Jun 2021
CVE-2022-41912: Vulnerability in github.com/crewjam/saml - Signature Bypass via Multiple Assertion Elements 9.1 critical 0.4.9 29 Nov 2022
CVE-2023-28119: Denial Of Service Via Deflate Decompression Bomb in github.com/crewjam/saml 7.5 high 0.4.13 22 Mar 2023
Cross-site Scripting Vulnerability in github.com/crewjam/saml 7.1 high 0.4.14 17 Oct 2023
Cross-site scripting vulnerability in github.com/crewjam/saml N/A unrated 0.4.14 24 Oct 2023
CVE-2023-28119: Denial Of Service Via Deflate Decompression Bomb in github.com/crewjam/saml N/A unrated 0.4.13 23 Aug 2023
CVE-2022-41912: Vulnerability in github.com/crewjam/saml - Signature Bypass via Multiple Assertion Elements N/A unrated 0.4.9 29 Nov 2022
CVE-2022-41912: Authentication bypass in github.com/crewjam/saml N/A unrated 0.4.9 29 Nov 2022
CVE-2020-27846: XML Processing error in github.com/crewjam/saml N/A unrated 0.4.3 14 Apr 2021
CVE-2020-27846: Signature validation bypass due to XML processing error in github.com/crewjam/saml N/A unrated 0.4.3 14 Apr 2021

Looking for another version, or everything Vulert holds for github.com/crewjam/saml?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/crewjam/saml v0.4.7-0.20220105150955-e007e418a04d

Is github.com/crewjam/saml v0.4.7-0.20220105150955-e007e418a04d vulnerable?

Yes. 10 vulnerabilities in the Vulert database cover github.com/crewjam/saml v0.4.7-0.20220105150955-e007e418a04d: 2 critical, 2 high, 0 medium and 0 low, plus 6 not yet rated. The upgrade Vulert recommends is v0.5.1, and each entry above names the fixed version to move to.

Which version of github.com/crewjam/saml should I use instead of v0.4.7-0.20220105150955-e007e418a04d?

v0.5.1 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is v0.4.7-0.20220105150955-e007e418a04d the latest release of github.com/crewjam/saml?

No. v0.4.7-0.20220105150955-e007e418a04d was published 05 Jan 2022, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor github.com/crewjam/saml for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/crewjam/saml version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.