HA
Vendor
handnot2
6
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93471 | ES esaml handnot2 | 8.7 | Oct 22 | Unbounded SAML message decompression in esaml allows memory exhaustion |
| CVE-2026-86696 | ES esaml handnot2 | 8.2 | Oct 22 | Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion |
| CVE-2026-105270 | ES esaml handnot2 | 8.7 | Oct 22 | Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion |
| CVE-2026-53424 | SA samly handnot2 | 9.1 | Aug 20 | Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions |
| CVE-2026-53425 | SA samly handnot2 | 7.6 | Aug 20 | Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses |
| CVE-2026-28809 | ES esaml handnot2 | 5.3 | Mar 23 | XXE in esaml SAML library allows local file read and potential SSRF |