Is drupal/miniorange_saml vulnerable?

Composer drupal/miniorange_saml has 15 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.

15advisories
0critical
0on CISA KEV
0no fix recorded
CVETitleSeverityCVSSAffectedFixed in
CVE-2026-87950This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-5343This module enables you to perform SAML-protocol-based single-sign-on (SSO) on a Drupal site. The module doesn't sufficunknown0.0<3.1.43.1.4
CVE-2026-87951This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87943This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87946This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87948This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87952This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87945This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87949This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-3217This module enables you to perform SAML protocol-based single sign-on (SSO) on a Drupal site. The module doesn't sufficunknown0.0<3.1.33.1.3
CVE-2026-87953This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87947This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
CVE-2026-87944This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate throuunknown0.0<3.2.03.2.0
DRUPAL-CONTRIB-2020-038This module enables your users residing at a SAML 2.0 compliant Identity Provider to login to your Drupal website. Theunknown0.0<2.14.02.14.0
DRUPAL-CONTRIB-2021-036This module provides a solution to authenticate visitors using existing SAML providers. Certain non-default configuratiunknown0.0<2.24.02.24.0

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs   How findings are ranked
A version is vulnerable when it falls inside an affected range and below the fixed version. phpwarden applies these ranges to the exact versions in your lockfile or install, so you only see what applies to you.