Saml2

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a…CVE-2018-6519Simplesamlphp · 1.7% likely

   CWE-74

2. SimpleSAMLphp SAML2: Possible DoS via XPath TransformCVE-2026-49289simplesamlphp · CVSS 7.5 · 0.8% likely

   CWE-400

3. SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypassCVE-2026-49283simplesamlphp · CVSS 8.7 · 0.5% likely

   CWE-295

4. SimpleSAMLphp SAML2 has an XXE in parsing SAML messagesCVE-2024-52806simplesamlphp · CVSS 8.3 · 0.4% likely

   CWE-611

5. SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect bindingCVE-2025-27773simplesamlphp · CVSS 8.6 · 0.4% likely

   CWE-347

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.