AIKIDO-2026-10473

drupal/miniorange_saml is vulnerable to Authentication Bypass

Authentication BypassCVE-2026-5343

Critical Risk

0.0.1 - 3.1.3

Fixed in 3.1.4

TL;DR

This module does not sufficiently block access, leading to a authentication bypass vulnerability.

You are affected if you are using a version that falls within the vulnerable range.

drupal/miniorange_saml is vulnerable to Authentication Bypass in versions 0.0.1 - 3.1.3.

Upgrade the drupal/miniorange_saml library to the patch version.

Critical Risk

0.0.1 - 3.1.3

Fixed in 3.1.4

Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.

No credit card required | Scan results in 32secs.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

Security

Stay up to date with all updates

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US