Composer simplesamlphp/saml2 has 9 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2016-9814 | SimpleSAMLphp SAML2 spoof SAML responses | critical | 9.1 | >=1.10 and <1.10.3 or <1.8.1 or >=1.9.0 and <1.9.1 or >=2.0 and <2.3.3 | 1.10.3, 1.8.1, 1.9.1, 2.3.3 |
| CVE-2018-6519 | SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability | high | 7.5 | <1.10.4 or >=2.0 and <2.3.5 or >=3.0 and <3.1.1 | 1.10.4, 2.3.5, 3.1.1 |
| CVE-2018-7644 | SimpleSAMLphp Improper Verification of Cryptographic Signature | high | 7.5 | <1.10.5 or >=2.0 and <2.3.7 or >=3.0 and <3.1.3 | 1.10.5, 2.3.7, 3.1.3 |
| CVE-2018-7711 | SimpleSAMLphp saml2 incorrect signature validation | high | 8.1 | <1.10.6 or >=2.0 and <2.3.8 or >=3.0 and <3.1.4 | 1.10.6, 2.3.8, 3.1.4 |
| CVE-2026-49289 | SimpleSAMLphp has Possible DoS via XPath Transform | high | 7.5 | >=4.20.0 and <4.20.3 or <4.19.3 | 4.20.3, 4.19.3 |
| CVE-2026-49283 | SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass | high | 8.7 | >=6.0.0 and <6.2.1 or >=5.0.0 and <5.0.6 or >=4.20.0 and <4.20.2 or <4.19.3 | 6.2.1, 5.0.6, 4.20.2, 4.19.3 |
| CVE-2024-52806 | SimpleSAMLphp SAML2 has an XXE in parsing SAML messages | high | 8.3 | <4.6.14 | 4.6.14 |
| CVE-2025-27773 | The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding | high | 8.6 | <4.17.0 or >=5.0.0-alpha.1 and <5.0.0-alpha.20 | 4.17.0, 5.0.0-alpha.20 |
| CVE-2023-49087 | Validation of SignedInfo | high | 7.5 | >=5.0.0-alpha.12 and <5.0.0-alpha.13 | 5.0.0-alpha.13 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked