esaml vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ES

Product

esaml

by dropbox · last CVE Oct 22, 2026

4

CVEs

0

On KEV

8.7

Max CVSS

3

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 3Medium 1Low 0

Severity

All severities4 Critical0 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add esaml to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-93471	8.7	0%	Oct 22	Unbounded SAML message decompression in esaml allows memory exhaustion Affected: 0.1.0; deeb84378d5c82153b470e99d24f77c38afca14a
CVE-2026-105270	8.7	0%	Oct 22	Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion Affected: 0.1.0; deeb84378d5c82153b470e99d24f77c38afca14a
CVE-2026-86696	8.2	0%	Oct 22	Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion Affected: 0.1.0; be692b56245071899757afa7ef47e43593d3de96
CVE-2026-28809	5.3	0%	Mar 23	XXE in esaml SAML library allows local file read and potential SSRF Affected: All versions, or not specified