CVE-2020-26290

ADVISORY - github

Summary

The following vulnerabilities have been disclosed, which impact users leveraging the SAML connector:

encoding/xml instabilities:

Immediately update to Dex v2.27.0.

There are no known workarounds.

EPSS Score⁠: 0.005 (0.656)

ADVISORY - nist

Improper Verification of Cryptographic Signature

ADVISORY - github

Improper Verification of Cryptographic Signature

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Verification of Cryptographic Signature

Improper Neutralization

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Handling of Syntactically Invalid Structure

Authentication Bypass by Spoofing

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.