Vulnerabilities in handnot2
6 resultsCVE-2026-86696HIGHUnbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustionEPSS 0.7%CVE-2026-93471HIGHUnbounded SAML message decompression in esaml allows memory exhaustionEPSS 0.7%CVE-2026-53424CRITICALMissing one-time-use enforcement in Samly allows replay of SAML bearer assertionsEPSS 0.6%CVE-2026-105270HIGHUnbounded atom creation while parsing SAML messages in esaml allows atom table exhaustionEPSS 0.5%CVE-2026-28809MEDIUMXXE in esaml SAML library allows local file read and potential SSRFEPSS 0.3%CVE-2026-53425HIGHMissing InResponseTo validation in Samly allows acceptance of unsolicited SAML responsesEPSS 0.2%