Open-source package vulnerability · npm
CVE-2025-47949: samlify SAML Signature Wrapping attack
criticalCVSS 4.0 9.9GHSA-r683-v43c-6xqv
A Signature Wrapping attack has been found in samlify <v2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider.
Published May 19, 2025
Affected packages
samlify
- Ecosystem
- npm
- Affected
- < 2.10.0
- Fixed in
- 2.10.0
- Check
npm ls samlify
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
A Signature Wrapping attack has been found in samlify <v2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider.
Credited to ahacker1-securesaml.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology