Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/10 12:31 a.m.8 views

GHSA-M69X-PW9P-7J3Q Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates the compressed SAML payload into memory. Affected versions: Spring Security 5.7.0 through 5.7.23;...

7.5CVSS4.7AI score0.00331EPSS
SaveExploits0References5
Rows per page
Query Builder