Executive brief
gosaml2 CBC Padding Panic — Unauthenticated Process Crash
Affected products
- Go github.com/russellhaering/gosaml2
Junglewise Threat Intelligence
gosaml2 CBC Padding Panic , Unauthenticated Process Crash
Severity: medium · CVSS 4 · Published 2026-03-18
Technologies: github.com/russellhaering/gosaml2 (Go). Vendors: Go.
Related threats
- GO-2026-4760 - CBC Padding Panic , Unauthenticated Process Crash in github.com/russellhaering/gosaml2
- GO-2026-4764 - Unsigned SAML LogoutRequest Acceptance in gosaml2 in github.com/russellhaering/gosaml2
- Unsigned SAML LogoutRequest Acceptance in gosaml2
- GO-2023-1602 - Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2
- Signature Validation Bypass