Описание
This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-github-russellhaering-gosaml2 | itp | package |
Примечания
https://github.com/russellhaering/gosaml2/issues/59
https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOSAML2-608302
EPSS
Процентиль: 69%
0.00604
Низкий
Связанные уязвимости
CVSS3: 7.5
nvd
почти 5 лет назад
This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.
CVSS3: 7.5
github
около 3 лет назад
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
EPSS
Процентиль: 69%
0.00604
Низкий