CVE-2026-53424

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53424", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-06-09T11:01:47.529Z", "datePublished": "2026-08-20T17:27:11.115Z", "dateUpdated": "2026-08-21T19:42:21.623Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "samly", "packageURL": "pkg:hex/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/dropbox/samly", "vendor": "dropbox", "versions": [{"lessThan": "*", "status": "affected", "version": "0.3.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "dropbox/samly", "packageURL": "pkg:github/dropbox/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/dropbox/samly", "vendor": "dropbox", "versions": [{"lessThan": "*", "status": "affected", "version": "8a5bb1b4a4753d05470da2036323477f63cfdf4c", "versionType": "git"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:handnot2:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "handnot2/samly", "packageURL": "pkg:github/handnot2/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/handnot2/samly", "vendor": "handnot2", "versions": [{"lessThan": "*", "status": "affected", "version": "8a5bb1b4a4753d05470da2036323477f63cfdf4c", "versionType": "git"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*", "versionStartIncluding": "0.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:handnot2:samly:*:*:*:*:*:*:*:*", "versionStartIncluding": "0.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "reporter", "value": "Mark Madsen"}, {"lang": "en", "type": "coordinator", "value": "Jonatan M\u00e4nnchen / EEF"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.</p>\n<p><code>Samly.Helper.decode_idp_auth_resp/3</code> in <code>lib/samly/helper.ex</code> calls <code>esaml_sp:validate_assertion/2</code>, whose default duplicate detector is a no-op. The <code>/3</code> arity accepting a <code>DuplicateFun</code> exists in <code>esaml</code> and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid <code>SAMLResponse</code> obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's <code>NotOnOrAfter</code> passes, each time establishing a session as the assertion's subject.</p>\n<p>This issue affects samly: from 0.3.0 onward.</p>"}, {"base64": false, "type": "text/markdown", "value": "Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.\n\n`Samly.Helper.decode_idp_auth_resp/3` in `lib/samly/helper.ex` calls `esaml_sp:validate_assertion/2`, whose default duplicate detector is a no-op. The `/3` arity accepting a `DuplicateFun` exists in `esaml` and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid `SAMLResponse` obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's `NotOnOrAfter` passes, each time establishing a session as the assertion's subject.\n\nThis issue affects samly: from 0.3.0 onward."}], "value": "Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.\n\nSamly.Helper.decode_idp_auth_resp/3 in lib/samly/helper.ex calls esaml_sp:validate_assertion/2, whose default duplicate detector is a no-op. The /3 arity accepting a DuplicateFun exists in esaml and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid SAMLResponse obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's NotOnOrAfter passes, each time establishing a session as the assertion's subject.\n\nThis issue affects samly: from 0.3.0 onward."}], "impacts": [{"capecId": "CAPEC-60", "descriptions": [{"lang": "en", "value": "CAPEC-60 Reusing Session IDs (aka Session Replay)"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 9.1, "baseSeverity": "CRITICAL", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-294", "description": "CWE-294 Authentication Bypass by Capture-replay", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-08-20T18:37:24.439Z"}, "references": [{"tags": ["related", "third-party-advisory"], "url": "https://cna.erlef.org/cves/CVE-2026-53424.html"}, {"tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-53424"}], "source": {"discovery": "UNKNOWN"}, "title": "Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-21T19:41:30.269903Z", "id": "CVE-2026-53424", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-21T19:42:21.623Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53424", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-06-09T11:01:47.529Z", "datePublished": "2026-08-20T17:27:11.115Z", "dateUpdated": "2026-08-21T19:42:21.623Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "samly", "packageURL": "pkg:hex/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/dropbox/samly", "vendor": "dropbox", "versions": [{"lessThan": "*", "status": "affected", "version": "0.3.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "dropbox/samly", "packageURL": "pkg:github/dropbox/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/dropbox/samly", "vendor": "dropbox", "versions": [{"lessThan": "*", "status": "affected", "version": "8a5bb1b4a4753d05470da2036323477f63cfdf4c", "versionType": "git"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:handnot2:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "handnot2/samly", "packageURL": "pkg:github/handnot2/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/handnot2/samly", "vendor": "handnot2", "versions": [{"lessThan": "*", "status": "affected", "version": "8a5bb1b4a4753d05470da2036323477f63cfdf4c", "versionType": "git"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*", "versionStartIncluding": "0.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:handnot2:samly:*:*:*:*:*:*:*:*", "versionStartIncluding": "0.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "reporter", "value": "Mark Madsen"}, {"lang": "en", "type": "coordinator", "value": "Jonatan M\u00e4nnchen / EEF"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.</p>\n<p><code>Samly.Helper.decode_idp_auth_resp/3</code> in <code>lib/samly/helper.ex</code> calls <code>esaml_sp:validate_assertion/2</code>, whose default duplicate detector is a no-op. The <code>/3</code> arity accepting a <code>DuplicateFun</code> exists in <code>esaml</code> and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid <code>SAMLResponse</code> obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's <code>NotOnOrAfter</code> passes, each time establishing a session as the assertion's subject.</p>\n<p>This issue affects samly: from 0.3.0 onward.</p>"}, {"base64": false, "type": "text/markdown", "value": "Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.\n\n`Samly.Helper.decode_idp_auth_resp/3` in `lib/samly/helper.ex` calls `esaml_sp:validate_assertion/2`, whose default duplicate detector is a no-op. The `/3` arity accepting a `DuplicateFun` exists in `esaml` and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid `SAMLResponse` obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's `NotOnOrAfter` passes, each time establishing a session as the assertion's subject.\n\nThis issue affects samly: from 0.3.0 onward."}], "value": "Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.\n\nSamly.Helper.decode_idp_auth_resp/3 in lib/samly/helper.ex calls esaml_sp:validate_assertion/2, whose default duplicate detector is a no-op. The /3 arity accepting a DuplicateFun exists in esaml and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid SAMLResponse obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's NotOnOrAfter passes, each time establishing a session as the assertion's subject.\n\nThis issue affects samly: from 0.3.0 onward."}], "impacts": [{"capecId": "CAPEC-60", "descriptions": [{"lang": "en", "value": "CAPEC-60 Reusing Session IDs (aka Session Replay)"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 9.1, "baseSeverity": "CRITICAL", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-294", "description": "CWE-294 Authentication Bypass by Capture-replay", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-08-20T18:37:24.439Z"}, "references": [{"tags": ["related", "third-party-advisory"], "url": "https://cna.erlef.org/cves/CVE-2026-53424.html"}, {"tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-53424"}], "source": {"discovery": "UNKNOWN"}, "title": "Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions"}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-53424", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-21T19:41:30.269903Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-21T19:41:38.301Z"}}]}}

{"affected": [{"affectedData": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "samly", "packageURL": "pkg:hex/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/dropbox/samly", "vendor": "dropbox", "versions": [{"lessThan": "*", "status": "affected", "version": "0.3.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:dropbox:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "dropbox/samly", "packageURL": "pkg:github/dropbox/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/dropbox/samly", "vendor": "dropbox", "versions": [{"lessThan": "*", "status": "affected", "version": "8a5bb1b4a4753d05470da2036323477f63cfdf4c", "versionType": "git"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:handnot2:samly:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["'Elixir.Samly.Helper'"], "packageName": "handnot2/samly", "packageURL": "pkg:github/handnot2/samly", "product": "samly", "programFiles": ["lib/samly/helper.ex"], "programRoutines": [{"name": "'Elixir.Samly.Helper':decode_idp_auth_resp/3"}], "repo": "https://github.com/handnot2/samly", "vendor": "handnot2", "versions": [{"lessThan": "*", "status": "affected", "version": "8a5bb1b4a4753d05470da2036323477f63cfdf4c", "versionType": "git"}]}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it.\n\nSamly.Helper.decode_idp_auth_resp/3 in lib/samly/helper.ex calls esaml_sp:validate_assertion/2, whose default duplicate detector is a no-op. The /3 arity accepting a DuplicateFun exists in esaml and implements the check, but Samly never calls it and offers no configuration to supply one, so the SAML 2.0 Web Browser SSO Profile requirement that a bearer assertion be used once is unenforced. An attacker holding a valid SAMLResponse obtained from the network, from browser history, or from logs can submit the identical bytes repeatedly until the assertion's NotOnOrAfter passes, each time establishing a session as the assertion's subject.\n\nThis issue affects samly: from 0.3.0 onward."}, {"lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n por captura-repetici\u00f3n en dropbox samly permite a un atacante autenticarse como el sujeto de una aserci\u00f3n SAML capturada volvi\u00e9ndola a enviar.\n\nSamly.Helper.decode_idp_auth_resp/3 en lib/samly/helper.ex llama a esaml_sp:validate_assertion/2, cuyo detector de duplicados predeterminado es una operaci\u00f3n nula (no-op). La aridad /3 que acepta una DuplicateFun existe en esaml e implementa la verificaci\u00f3n, pero Samly nunca la llama y no ofrece ninguna configuraci\u00f3n para proporcionarla, por lo que el requisito del perfil SSO de navegador web SAML 2.0 de que una aserci\u00f3n de portador se use una sola vez no se aplica. Un atacante que posee una SAMLResponse v\u00e1lida obtenida de la red, del historial del navegador o de los registros puede enviar los bytes id\u00e9nticos repetidamente hasta que pase el NotOnOrAfter de la aserci\u00f3n, estableciendo cada vez una sesi\u00f3n como el sujeto de la aserci\u00f3n.\n\nEste problema afecta a samly: a partir de la versi\u00f3n 0.3.0."}], "id": "CVE-2026-53424", "lastModified": "2026-10-26T10:10:00.140", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53424", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-21T19:41:30.269903Z", "version": "2.0.3"}}]}, "published": "2026-08-20T18:16:27.680", "references": [{"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://cna.erlef.org/cves/CVE-2026-53424.html"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://osv.dev/vulnerability/EEF-CVE-2026-53424"}], "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-294"}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.3.0,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8a5bb1b4a4753d05470da2036323477f63cfdf4c,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "samly", "vendor": "dropbox"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.3.0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "samly", "source": "cna", "vendor": "dropbox"}, "product": "samly", "vendor": "dropbox"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8a5bb1b4a4753d05470da2036323477f63cfdf4c,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "samly", "source": "cna", "vendor": "dropbox"}, "product": "samly", "vendor": "dropbox"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8a5bb1b4a4753d05470da2036323477f63cfdf4c,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "samly", "vendor": "handnot2"}], "created": "2026-08-20T20:00:05.758183+00:00", "updated": "2026-08-21T01:45:08.043637+00:00", "vendors": ["dropbox", "dropbox$PRODUCT$samly", "handnot2", "handnot2$PRODUCT$samly"]}