CVE-2026-9095

Casdoor versions 2.362.0 and earlier are vulnerable to authentication bypass due to a lack of replay protection when mapping SAML assertions to user sessions. The ParseSamlResponse() function in object/saml_sp.go calls sp.RetrieveAssertionInfo() and immediately maps the result to a session withou...