Executive brief
Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2
Affected products
- Go github.com/russellhaering/gosaml2
Junglewise Threat Intelligence
CVE-2023-26483: GO-2023-1602 - Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2
CVE-2023-26483 · Severity: low · CVSS 3.1 · Published 2023-03-03
Technologies: github.com/russellhaering/gosaml2 (Go). Vendors: Go.
Related threats
- GO-2026-4760 - CBC Padding Panic , Unauthenticated Process Crash in github.com/russellhaering/gosaml2
- GO-2026-4764 - Unsigned SAML LogoutRequest Acceptance in gosaml2 in github.com/russellhaering/gosaml2
- Unsigned SAML LogoutRequest Acceptance in gosaml2
- gosaml2 CBC Padding Panic , Unauthenticated Process Crash
- Signature Validation Bypass