PT-2023-20674 · Gosaml2 · Gosaml2

Name of the Vulnerable Software and Affected Versions: gosaml2 versions prior to 0.9.0 Description: A bug in the gosaml2 library enables attackers to craft a deflate-compressed request which will consume significantly more memory during processing than the size of the original request. This may...