krakenjs passport-saml-encrypted

2 known vulnerabilities in krakenjs passport-saml-encrypted, 2 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-89043 CVSS 9.1 critical passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion…
CVE-2026-89042 CVSS 9.3 critical passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to…