#

xml-injection

Here is 1 public repository matching this topic...

BiiTts / CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e.

nodejs saml poc sso privilege-escalation security-research samlify xml-injection cve-2026-46490

Updated Jun 30, 2026
JavaScript

Improve this page

Add a description, image, and links to the xml-injection topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the xml-injection topic, visit your repo's landing page and select "manage topics."