esaml (Hex)
Advisories
5
Latest version
—
License
—
OpenSSF Scorecard
—
Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| EEF-CVE-2026-93471 Unbounded SAML message decompression in esaml allows memory exhaustion |
Not rated yet EPSS 0.66% |
>= 0.1.0 | No fix yet |
| EEF-CVE-2026-86696 Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion |
Not rated yet EPSS 0.66% |
>= 0.1.0 | No fix yet |
| EEF-CVE-2026-105270 Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion |
Not rated yet EPSS 0.53% |
>= 0.1.0 | No fix yet |
| EEF-CVE-2026-28809 XXE in esaml SAML library allows local file read and potential SSRF |
Medium EPSS 0.29% |
all versions | No fix yet |
| EEF-CVE-2026-28809 XXE in esaml SAML library allows local file read and potential SSRF |
Medium EPSS 0.29% |
<= 4.6.0 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor