PT-2026-96278

Name of the Vulnerable Software and Affected Versions Joplin Server versions prior to 3.7.2 Description In deployments using mixed local and SAML authentication, the UserModel.ssoLogin function returns an existing account matched by an Identity Provider IdP-asserted email without verifying the...