Packages

esaml

4.6.0
4.6.0 4.5.0 4.4.0 4.3.0 4.2.0 4.1.0 4.0.0 3.7.0 3.6.1 3.6.0 3.5.0 3.4.0 3.3.0 3.2.0 3.1.0 3.0.1

SAML Server Provider library for erlang

Security advisory: This version has known vulnerabilities. View advisories
HexDocs Report package

Current section

4 Advisories

Jump to
Documentation
Changelog
License
16 Versions
1 Dependency
3 Dependants
4 Advisories
Files
Activity
EEF-CVE-2026-93471 CVE-2026-93471

Unbounded SAML message decompression in esaml allows memory exhaustion

October 22, 2026
CVSS
?
8.7 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0
EEF-CVE-2026-86696 CVE-2026-86696

Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion

October 22, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0
EEF-CVE-2026-105270 CVE-2026-105270

Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion

October 22, 2026
CVSS
?
8.7 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0
EEF-CVE-2026-28809 CVE-2026-28809 GHSA-4g2h-vm7x-747c

XXE in esaml SAML library allows local file read and potential SSRF

March 23, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.0.0 <= 4.6.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 1K 2K 3K 4K

this version

1 350 953

yesterday

594

last 7 days

14 079

all time

3 073 406

Last Updated

Jan 29, 2024

License

BSD

Build Tools

rebar3

Publisher

kmc kmc

Links

Owners