Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.4% on proxy.golang.org
Top 0.6% dependent packages on proxy.golang.org
Top 0.5% dependent repos on proxy.golang.org
Top 2.5% forks on proxy.golang.org
Top 0.3% docker downloads on proxy.golang.org

proxy.golang.org : github.com/russellhaering/gosaml2

Pure Go implementation of SAML 2.0

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/russellhaering/gosaml2
License: Apache-2.0
Latest release: about 1 year ago
First release: about 6 years ago
Namespace: github.com/russellhaering
Dependent packages: 65
Dependent repositories: 155
Stars: 264 on GitHub
Forks: 108 on GitHub
Docker dependents: 57
Docker downloads: 35,201,825
See more repository details: repos.ecosyste.ms
Last synced: 1 day ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU2ODQtZzQ4My0yMjQ5

Signature Validation Bypass
Ecosystems: go
Packages: github.com/russellhaering/gosaml2
Source: github
Published: almost 3 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhocXEteDQ0Zi05Zmdn

Authentication Bypass in github.com/russellhaering/gosaml2
Ecosystems: go
Packages: github.com/russellhaering/gosaml2
Source: github
Published: over 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdxNXItY2M0dy1nOHhm

gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig, github.com/russellhaering/gosaml2
Source: github
Published: almost 3 years ago

Moderate

GSA_kwCzR0hTQS02Z2MzLWNycDctMjV3Nc4AAx6h

gosaml2 vulnerable to Denial Of Service Via Deflate Decompression Bomb
Ecosystems: go
Packages: github.com/russellhaering/gosaml2
Source: github
Published: about 1 year ago

High

GSA_kwCzR0hTQS1tcXF2LWNocHgtdnEyNc4AAvL_

goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
Ecosystems: go
Packages: github.com/russellhaering/gosaml2, github.com/russellhaering/goxmldsig
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS1wcmpxLWY0cTMtZnZmcs4AAv43

github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig, github.com/russellhaering/gosaml2
Source: github
Published: over 1 year ago