tag
Identity-Provider
High
samlify SAML AttributeValue XML Injection → Privilege Escalation (CVE-2026-46490)
CVE-2026-46490 / GHSA-34r5-q4jw-r36m·
samlify (Node.js SAML library)
patched
Critical
Keycloak Unauthorized Organization Registration via Invitation Token Flaw — CVE-2026-1529
CVE-2026-1529·
Keycloak (organization/invitation feature)
unpatched