Login Request a demo
ES
Product
esaml
by dropbox · last CVE Oct 22, 2026
4
CVEs
0
On KEV
8.7
Max CVSS
3
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add esaml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93471
8.7
0%
Oct 22
Unbounded SAML message decompression in esaml allows memory exhaustion
Affected: 0.1.0; deeb84378d5c82153b470e99d24f77c38afca14a
CVE-2026-105270
8.7
0%
Oct 22
Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion
Affected: 0.1.0; deeb84378d5c82153b470e99d24f77c38afca14a
CVE-2026-86696
8.2
0%
Oct 22
Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion
Affected: 0.1.0; be692b56245071899757afa7ef47e43593d3de96
Showing 3