Update for reported security vulnerability

auth0 / passport-wsfed-saml2

passport strategy for both WS-fed and SAML2 protocol

MIT License

48 stars 62 forks source link

Update for reported security vulnerability #183

Closed allens01 closed 1 year ago

allens01 commented 1 year ago

Description

The latest version of this module 4.6.1 has reported vulnerability CVE-2022-23505 (https://nvd.nist.gov/vuln/detail/CVE-2022-23505) do you have an updated on when this will be addressed?

allens01 commented 1 year ago

Appologies, I stand corrected, it has been addressed in 4.6.3, but this does not look to have been published to NPM. Am I missing something? How do I obtain 4.6.3?

allens01 commented 1 year ago

Looks like 4.6.3 has now been published, thanks!