Executive brief
Authentication bypass in github.com/russellhaering/gosaml2
Affected products
- Go github.com/russellhaering/gosaml2
Junglewise Threat Intelligence
CVE-2020-29509: GO-2021-0060 - Authentication bypass in github.com/russellhaering/gosaml2
CVE-2020-29509 · Severity: low · CVSS 3.1 · Published 2021-04-14
Technologies: github.com/russellhaering/gosaml2 (Go). Vendors: Go.
Related threats
- GO-2026-4760 - CBC Padding Panic , Unauthenticated Process Crash in github.com/russellhaering/gosaml2
- GO-2026-4764 - Unsigned SAML LogoutRequest Acceptance in gosaml2 in github.com/russellhaering/gosaml2
- Unsigned SAML LogoutRequest Acceptance in gosaml2
- gosaml2 CBC Padding Panic , Unauthenticated Process Crash
- GO-2023-1602 - Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2