org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.2.0-alpha.1, <=1.2.0-beta.1), org.keycloak:keycloak-account-freemarker (1.7.0.final) +10 more potentially affected by CVE-2025-1391 via org.keycloak:keycloak-services (1.7.0.final)

org.keycloak:keycloak-services MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.2.0-alpha.1, =1.2.0-beta.1 -...

org.keycloak:keycloak-account-freemarker (1.8.0.alpha1), org.keycloak:keycloak-broker-oidc (1.8.0.alpha1) +9 more potentially affected by CVE-2025-1391 via org.keycloak:keycloak-services (1.8.0.alpha1)

org.keycloak:keycloak-services MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.alpha1 - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.8.0.final), org.keycloak:keycloak-broker-oidc (1.8.0.final) +9 more potentially affected by CVE-2025-1391 via org.keycloak:keycloak-services (1.8.0.final)

org.keycloak:keycloak-services MAVEN version 1.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.8.1.final), org.keycloak:keycloak-broker-oidc (1.8.1.final) +9 more potentially affected by CVE-2025-1391 via org.keycloak:keycloak-services (1.8.1.final)

org.keycloak:keycloak-services MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.1.final - org.keycloak:keycloak-broker-oidc...

GO-2025-3505 Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet

Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

Fleet has SAML authentication vulnerability due to improper SAML response validation

Summary A vulnerability in Fleet’s SAML authentication handling could allow an attacker to forge authentication assertions and gain unauthorized access to Fleet. In certain configurations, this could result in the creation of new user accounts, including administrative accounts. This issue affect...

GHSA-52JX-G6M5-H735 Fleet has SAML authentication vulnerability due to improper SAML response validation

Summary A vulnerability in Fleet’s SAML authentication handling could allow an attacker to forge authentication assertions and gain unauthorized access to Fleet. In certain configurations, this could result in the creation of new user accounts, including administrative accounts. This issue affect...

CVE-2025-27509 SAML authentication vulnerability due to improper SAML response validation

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509

Fleet has a SAML authentication vulnerability (CVE-2025-27509) due to improper SAML response validation in fleetdm/fleet. In vulnerable versions, an attacker could forge authentication assertions, potentially provisioning a new administrative user under JIT provisioning or creating accounts tied ...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509 SAML authentication vulnerability due to improper SAML response validation

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509 SAML authentication vulnerability due to improper SAML response validation

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

com.joelj.jenkins:ez-templates (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.574) +6 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.574)

org.jenkins-ci.main:jenkins-core MAVEN version 1.574 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.joelj.jenkins:ez-templates 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.574 -...

com.joelj.jenkins:ez-templates (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.574) +6 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.574)

org.jenkins-ci.main:jenkins-core MAVEN version 1.574 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.joelj.jenkins:ez-templates 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.574 -...

PT-2025-9999

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.64.2 Fleet versions prior to 4.63.2 Fleet versions prior to 4.62.4 Fleet versions prior to 4.58.1 Description The issue allows an attacker to craft a specially-formed SAML response to forge authentication assertions...

CVE-2025-27509: Improper Authorization

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

Improper Access Control

Rancher is vulnerable to Improper Access Control. The vulnerability is due to improper access due to unauthenticated users being able to list and delete CLI authentication tokens before they can be retrieved, preventing CLI-based login for SAML-authenticated users...

Improper Authentication

Rancher is vulnerable to Improper Authentication. The vulnerability is due to improper validation of SAML assertion data due to Rancher trusting and using unvalidated values in authentication cookies, allowing attackers to manipulate session data and escalate privileges...

Malicious code in saml-sp-linking-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cefc3296ba659b91b026973376ed7a792b2c6c13d304e42d3742eddd7ae5ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...