Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Net-SAML2

cpan

SAML bindings and protocol implementation

View on github.com · View on metacpan.org

Security Advisories for Net-SAML2 in cpan

Critical
3 days ago

Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature. CPANSA-Net-SAML2-2026-18108

cpan Net-SAML2
High
3 days ago

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtree. CPANSA-Net-SAML2-2026-18092

cpan Net-SAML2
High
3 days ago

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured. CPANSA-Net-SAML2-2026-18089

cpan Net-SAML2

Filter by Severity

High 2 Critical 1