Dropbox / Samly

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-53424	Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions	CRITICAL	9.1	Aug 20, 2026
CVE-2026-53425	Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses	HIGH	7.6	Aug 20, 2026
CVE-2024-25718	In the Samly package before 1.4.0 for Elixir, Samly.State.Store.get_assertion/3 can return an expired session, which interferes with access control because Sam…	CRITICAL	9.3	Feb 11, 2024

Rows per page

Showing 1 to 3 of 3 CVEs