https://advisories.gitlab.com/npm/passport-wsfed-saml2/CVE-2022-23505/
Authentication Bypass for WSFed | GitLab Advisory Database (GLAD)
CVE-2022-23505 Authentication Bypass for WSFed: Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. In...
authentication bypassgitlabadvisorydatabaseglad
https://auth0.com/docs/secure/security-guidance/security-bulletins/cve-2017-16897
CVE-2017-16897: Security Update for passport-wsfed-saml2 Passport Strategy Library - Auth0 Docs
CVE-2017-16897: Security Update for passport-wsfed-saml2 Passport strategy library
https://advisories.gitlab.com/npm/passport-wsfed-saml2/GMS-2023-1886/
passport-wsfed-saml2 Signature Bypass vulnerability | GitLab Advisory Database (GLAD)
GMS-2023-1886 passport-wsfed-saml2 Signature Bypass vulnerability: Information Please note that this is not a new disclosure, and is previously reported in our...
passportsignaturebypassvulnerabilitygitlab
https://advisories.gitlab.com/npm/passport-wsfed-saml2/CVE-2025-46572/
Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping | GitLab Advisory...
CVE-2025-46572 Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping: Overview This vulnerability allows an attacker to impersonate any...
saml authentication