https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T19:58:28.282514+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123540 fkie_cve-2026-123540 2026-11-12T19:58:28.284233+00:00

OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers controlling a trusted identity provider can craft assertion attribute names or values that reach the target application in modified form, undermining the integrity of received attributes.

 https://db.gcve.eu/vuln/ghsa-gp9c-wgqc-wwg3 GHSA-gp9c-wgqc-wwg3 2026-11-12T19:58:28.284280+00:00

OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers controlling a trusted identity provider can craft assertion attribute names or values that reach the target application in modified form, undermining the integrity of received attributes.