CVE-2020-7731: GOSAML2 Project GOSAML2

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

Affected products

• GOSAML2 Project GOSAML2: any version

Published 2021-04-30. Last modified 2026-06-17.