11 matches found
CVE-2026-86696
Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...
CVE-2026-86696 Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion
Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...
CVE-2026-86696
Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...
CVE-2026-86696 Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion
Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...
EUVD-2026-108051
Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...
EEF-CVE-2026-86696 Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion
Summary Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it...
CVE-2026-86696
The esaml library (version 0.1.0 and onward), used in dropbox esaml , is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. An unauthenticated attacker can exhaust the Erlang VM atom table and crash the node by sending unsigned LogoutResponse messages to the sin...
PT-2026-121295
Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:status code map/1 in src/esaml.erl maps any StatusCode value it does n...
CLEANSTART-2026-FU03579 Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payl...
Security vulnerability affects the apache-nifi package. Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a...
GHSA-WW38-37G9-M3Q3 Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads
Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a decryption oracle. Affected versions: Spring Security 5.7.0...
PT-2026-76011
Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a decryption oracle. Affected versions: Spring Security 5.7.0...