CVE-2026-46490 - samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions
CVE ID :CVE-2026-46490 Published : June 8, 2026, 7:16 p.m. | 1 hour, 58 minutes ago Description :samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., ) are not...