Vulnerability Database · Go · Package report
github.com/russellhaering/gosaml2: vulnerability history, versions and safety
github.com/russellhaering/gosaml2 is a package in the Go ecosystem. Vulert records 14 vulnerabilities for it across 120 releases, from Apr 2021 to Mar 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on github.com/russellhaering/gosaml2 v0.12.0 i
Updated on 23 Oct 2026
Action needed: v0.12.0 has 14 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.
- Security Some issues to review
- Maintenance Sustainable
- Popularity Niche
- Community Moderate
What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →
- Current release v0.12.0 — affected i
- Vulnerabilities on record 14 over 4 years · 4 in the last year i
- Latest disclosure 27 Mar 2026 i
- Highest CVSS 9.8 i
- With no published fix 0 i
- Stars 370 i
- OpenSSF scorecard 5/10 i
- Last release 2 months ago i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/russellhaering/gosaml2, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.12.1-0.20260805181527-c47eb2cf608a 05 Aug 2026
- v0.12.0 05 Aug 2026
- v0.11.0 18 Mar 2026
- v0.10.1-0.20260318054118-7159bbee574a 18 Mar 2026
- v0.10.1-0.20260318044135-4ddcc822c3c2 18 Mar 2026
- v0.10.1-0.20250505191407-5d20d420e18a 05 May 2025
- v0.10.0 20 Mar 2025
- v0.9.2-0.20250320060723-3418f9ae0906 20 Mar 2025
- v0.9.2-0.20250320053454-42eb1f0eea92 20 Mar 2025
- v0.9.2-0.20250320052805-5523b4731bc5 20 Mar 2025
- v0.9.2-0.20240304071915-869035899b00 04 Mar 2024
- v0.9.2-0.20240304024641-5b208a0d7c2e 04 Mar 2024
- v0.9.2-0.20240205145444-590f2d9f1d95 05 Feb 2024
- v0.9.2-0.20240205030158-28b4114e058a 05 Feb 2024
- v0.9.2-0.20240125034854-17360e38c530 25 Jan 2024
- v0.9.2-0.20240117224904-9804c58e97b2 17 Jan 2024
- v0.9.2-0.20231211022241-dddf39eba90b 11 Dec 2023
- v0.9.2-0.20231023034824-28dd7eb3bff8 23 Oct 2023
- v0.9.2-0.20231009055014-9517aa55ef7a 09 Oct 2023
- v0.9.2-0.20231009045150-4bf2bc68d380 09 Oct 2023
- v0.9.2-0.20230925035030-1d0c14ce96f7 25 Sep 2023
- v0.9.2-0.20230904030027-3022141e4f09 04 Sep 2023
- v0.9.2-0.20230829160742-82b3a26c3489 29 Aug 2023
- v0.9.2-0.20230817175341-cecf749be68a 17 Aug 2023
- v0.9.2-0.20230817145714-799f8cdb2b0d 17 Aug 2023
- v0.9.2-0.20230816233653-7e3927f9044a 16 Aug 2023
- v0.9.2-0.20230816233653-8d0ab569dbb5 16 Aug 2023
- v0.0.0-20230619061112-51e598f4c748 19 Jun 2023
- v0.9.2-0.20230619061112-51e598f4c748 19 Jun 2023
- v0.9.2-0.20230531145104-653ca4dabe33 31 May 2023
- v0.9.2-0.20230531144932-8ec6f7589a78 31 May 2023
- v0.9.2-0.20230522035624-c7da9a047be8 22 May 2023
- v0.9.2-0.20230515062853-a6d459246292 15 May 2023
- v0.9.2-0.20230508035537-4f8349f629b4 08 May 2023
- v0.9.2-0.20230425063522-bbe0d058321f 25 Apr 2023
- v0.9.2-0.20230425045334-38d829e1e9e1 25 Apr 2023
- v0.9.2-0.20230424030728-e370a2a04781 24 Apr 2023
- v0.9.2-0.20230421171916-857960d8fe87 21 Apr 2023
- v0.9.2-0.20230421152331-504bc1d36ab7 21 Apr 2023
- v0.9.2-0.20230420235956-dd06af4ed75c 20 Apr 2023
- v0.9.1 08 Mar 2023
- v0.9.1-0.20230301223755-75afada9d568 01 Mar 2023
- v0.9.0 01 Mar 2023
- v0.8.2-0.20230301214805-f9d660402410 01 Mar 2023
- v0.8.2-0.20230208192850-3102a0262c7f 08 Feb 2023
- v0.0.0-20221012055656-5b3023d5d1bd 12 Oct 2022
- v0.8.2-0.20221012055656-5b3023d5d1bd 12 Oct 2022
- v0.8.1 21 Sep 2022
- v0.8.0 02 Jul 2022
- v0.7.1-0.20220702151851-62589e2c75ef 02 Jul 2022
- v0.7.1-0.20220702151721-91f4ab3e0e65 02 Jul 2022
- v0.7.1-0.20220629114438-a23bd676c03b 29 Jun 2022
- v0.7.1-0.20220315232228-342698e2e44a 15 Mar 2022
- v0.6.1-0.20220302235754-66e3b7affd62 02 Mar 2022
- v0.7.0 02 Mar 2022
- v0.6.1-0.20220302235255-7715e4e9b4ba 02 Mar 2022
- v0.6.1-0.20220302235110-fe858d352d84 02 Mar 2022
- v0.6.1-0.20220302234624-d0e060af8ca5 02 Mar 2022
- v0.6.1-0.20220302234153-bcbccfc78d29 02 Mar 2022
- v0.6.1-0.20220125004650-95dc90a15256 25 Jan 2022
- v0.6.1-0.20220125001739-fb19d9bb845c 25 Jan 2022
- v0.6.1-0.20220125001550-b4c721f06b3f 25 Jan 2022
- v0.4.1-0.20211109092210-a3bbc13c75da 09 Nov 2021
- v0.6.1-0.20210929132151-16d8a8a12462 29 Sep 2021
- v0.6.1-0.20210929131046-50311f8bd79d 29 Sep 2021
- v0.5.1-0.20210916051624-757d23f1bc28 16 Sep 2021
- v0.6.1-0.20210916051624-757d23f1bc28 16 Sep 2021
- v0.6.1-0.20210916050455-f62c4bbd0236 16 Sep 2021
- v0.6.1-0.20210916050319-8440a236d1d3 16 Sep 2021
- v0.6.1-0.20210910041448-80239c93221f 10 Sep 2021
- v0.6.1-0.20210909214743-8b2881755b86 09 Sep 2021
- v0.6.1-0.20210909214623-0ae39c25ef72 09 Sep 2021
- v0.6.1-0.20201216035416-70944041979a 16 Dec 2020
- v0.6.1-0.20201216035129-70ed0e101488 16 Dec 2020
- v0.6.1-0.20201215074909-4914585ef371 15 Dec 2020
- v0.3.2-0.20201214080514-301b467f8a02 14 Dec 2020
- v0.6.1-0.20201214080514-301b467f8a02 14 Dec 2020
- v0.6.0 14 Dec 2020
- v0.5.1-0.20201214034834-0f0fb74d103c 14 Dec 2020
- v0.5.1-0.20201211060447-f2adcc47288a 11 Dec 2020
- v0.5.0 29 Sep 2020
- v0.4.1-0.20200612165505-c5e4533f6129 12 Jun 2020
- v0.0.0-20200204001025-d5663ceab3ff 04 Feb 2020
- v0.3.2-0.20200204001025-d5663ceab3ff 04 Feb 2020
- v0.4.0 04 Feb 2020
- v0.3.2-0.20200203204025-b25811af2779 03 Feb 2020
- v0.3.2-0.20200203203221-431dce2e41c1 03 Feb 2020
- v0.3.2-0.20200203202801-a7f26315de16 03 Feb 2020
- v0.3.2-0.20200203202620-09fdee5d7c98 03 Feb 2020
- v0.3.2-0.20200203191238-232cc003d913 03 Feb 2020
- v0.3.2-0.20200203190455-3e01eed5d2e4 03 Feb 2020
- v0.3.2-0.20200203184610-c235c9fb8a72 03 Feb 2020
- v0.3.2-0.20200110043855-3a410a4bea5c 10 Jan 2020
- v0.3.2-0.20200109173551-5cfddeb48b17 09 Jan 2020
- v0.3.2-0.20191219105356-142773058c19 19 Dec 2019
- v0.0.0-20190712190530-f05918046bab 12 Jul 2019
- v0.3.2-0.20190712190530-f05918046bab 12 Jul 2019
- v0.3.2-0.20190412044844-0282432762ea 12 Apr 2019
- v0.0.0-20190405201245-2506a07af064 05 Apr 2019
- v0.3.2-0.20190405201245-2506a07af064 05 Apr 2019
- v0.3.2-0.20190405201224-97f5e25e18eb 05 Apr 2019
- v0.3.2-0.20190403162508-649841e7f48a 03 Apr 2019
- v0.0.0-20181017014230-19d944e39439 17 Oct 2018
- v0.3.2-0.20181017014230-19d944e39439 17 Oct 2018
- v0.3.2-0.20181016083330-2dbb3c5f8f5b 16 Oct 2018
- v0.3.2-0.20180926053701-601631924c1b 26 Sep 2018
- v0.3.2-0.20180924132618-caa226423352 24 Sep 2018
- v0.3.2-0.20180912212824-f0b262b0babc 12 Sep 2018
- v0.3.2-0.20180823103449-8778b5eba021 23 Aug 2018
- v0.3.2-0.20180823074559-4126059776f3 23 Aug 2018
- v0.0.0-20180820055513-1b90112c5c38 20 Aug 2018
- v0.3.2-0.20180820055513-1b90112c5c38 20 Aug 2018
- v0.3.2-0.20180712050310-068f5d468c11 12 Jul 2018
- v0.3.2-0.20180709083457-0e9a1822ea17 09 Jul 2018
- v0.3.2-0.20180709040013-c73c404445d0 09 Jul 2018
- v0.3.2-0.20180704063530-1fb6235c7313 04 Jul 2018
- v0.3.2-0.20180614033329-83e1d9a3e891 14 Jun 2018
- v0.3.2-0.20180612083525-b2a7b5565b21 12 Jun 2018
- v0.3.2-0.20180611084114-ca075c728729 11 Jun 2018
- v0.3.2-0.20180611022326-6834a9d0e293 11 Jun 2018
The newest 120 of 316 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 4 of the 14 were recorded in the last 12 months.
03 Vulnerabilities
Recorded vulnerabilities for github.com/russellhaering/gosaml2
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| CVE-2020-29509: Authentication Bypass in github.com/russellhaering/gosaml2 | 9.8 critical | 0.6.0 | 11 Feb 2022 |
| Critical CBC Padding Panic in gosaml2 Package - Unauthenticated Process Crash | 8.7 high | 0.11.0 | 18 Mar 2026 |
| CVE-2020-7731: gosaml2 is vulnerable to NULL Pointer Dereference | 7.5 high | 0.7.0 | 15 Nov 2022 |
| Unsigned SAML LogoutRequest Vulnerability in gosaml2 | 7.5 high | 0.11.0 | 18 Mar 2026 |
| NULL Pointer Dereference Vulnerability in gosaml2 | 7.5 high | 0.7.0 | 23 Jun 2021 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
