Packages

samly

1.4.0
1.4.0 1.3.0 1.2.0 1.1.0 1.0.0 1.0.0-rc.1 retired 1.0.0-rc.0 retired 0.10.1 retired 0.10.0 retired 0.9.3 retired 0.9.2 retired 0.9.1 retired 0.9.0 retired 0.8.4 retired 0.8.3 retired 0.8.2 retired 0.8.1 retired 0.8.0 retired 0.7.2 retired 0.7.1 retired 0.7.0 retired 0.6.3 retired 0.6.2 retired 0.6.1 retired 0.6.0 retired 0.5.0 retired 0.4.0 retired 0.1.2 retired

SAML Single-Sign-On Authentication for Plug/Phoenix Applications

Security advisory: This version has known vulnerabilities. View advisories
HexDocs Report package

Current section

2 Advisories

Jump to
Readme
28 Versions
3 Dependencies
0 Dependants
2 Advisories
Files
Activity
EEF-CVE-2026-53424 CVE-2026-53424

Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

August 20, 2026
CVSS
?
9.1 / 10.0 Critical
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.3.0
EEF-CVE-2026-53425 CVE-2026-53425

Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses

August 20, 2026
CVSS
?
7.6 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.3.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 500 1000 1500 2000

this version

778 344

yesterday

568

last 7 days

4 808

all time

1 913 049

Last Updated

Jan 29, 2024

License

MIT

Build Tools

mix

Publisher

kmc kmc

Links

Owners