handnot2 vulnerabilities
6 published CVEs name handnot2 among the affected products.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 1
- Known exploited
- 0
Critical 1High 4Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2026-93471
Unbounded SAML message decompression in esaml allows memory exhaustion
handnot2 · esaml
High8.7 - CVE-2026-86696
Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion
handnot2 · esaml
High8.2 - CVE-2026-105270
Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion
arekinath · esaml
High8.7 - CVE-2026-53424
Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
dropbox · samly
Critical9.1 - CVE-2026-53425
Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses
dropbox · samly
High7.6 - CVE-2026-28809
XXE in esaml SAML library allows local file read and potential SSRF
dropbox · esaml
Medium6.3