GHSA-r683-v43c-6xqv

samlify SAML Signature Wrapping attack

Source: GitHub Advisory Database (reviewed) Critical CVE-2025-47949

Packages

Ecosystem	Package	Affected	Fixed in
npm	samlify	< 2.10.0	2.10.0

Details

As written in the advisory (Markdown source, shown as plain text).

A Signature Wrapping attack has been found in samlify <v2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider.

References

External links from the advisory. They lead to third-party sites.

https://github.com/tngan/samlify/security/advisories/GHSA-r683-v43c-6xqv web
https://nvd.nist.gov/vuln/detail/CVE-2025-47949 advisory
https://github.com/tngan/samlify/commit/115679acd89f0a37ea3ebd8fff7db54fca3e8af3 web
https://github.com/tngan/samlify package