EUVD-2025-6044

Malicious code in bioql PyPI...

EUVD-2025-6814

Malicious code in bioql PyPI...

EUVD-2022-5199

Malicious code in bioql PyPI...

EUVD-2023-2615

Malicious code in bioql PyPI...

EUVD-2021-9171

Malicious code in bioql PyPI...

EUVD-2022-47400

Malicious code in bioql PyPI...

EUVD-2022-4278

Malicious code in bioql PyPI...

EUVD-2022-24360

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-10873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenAM Open Source Edition allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability...

Malicious code in @com-delta-idp/core (npm)

The package @com-delta-idp/core was found to contain malicious code...

MAL-2025-42193 Malicious code in @com-delta-idp/core (npm)

The package @com-delta-idp/core was found to contain malicious code...

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

Malicious code in @ice-idp/webpack (npm)

The package @ice-idp/webpack was found to contain malicious code...

Malicious code in titan-quince-idp5 (npm)

The package titan-quince-idp5 was found to contain malicious code...

MAL-2025-8077 Malicious code in @ice-idp/webpack (npm)

The package @ice-idp/webpack was found to contain malicious code...

CVE-2025-54419 Node-SAML Contains SAML Signature Verification Vulnerability

A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details with...

CVE-2025-54419

CVE-2025-54419 – Node-SAML (Node.js) : Affected component is the node-saml library. In v5.0.1, it loads the SAML assertion from the unsigned original response document, separate from the parts that are verified for signature. This mismatch allows an attacker who has a validly signed IdP document ...

CVE-2023-38367

IBM Cloud Pak Foundational Services Identity Provider idP API IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows CRUD Operations with an invalid token. This could allow an unauthenticated attacker ...

CVE-2020-9437

SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS...

CVE-2012-2351

The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username...