| Package | Affected versions | Patched versions |
|---|---|---|
| simplesamlphp/simplesamlphp | < 1.8.1 | 1.8.1 |
| simplesamlphp | ≥ 1.6.0, < 1.6.3≥ 1.8.0, < 1.8.2 | 1.6.31.8.2 |
simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free