AIKIDO-2026-10473

drupal/miniorange_saml is vulnerable to Authentication Bypass

Authentication BypassCVE-2026-5343 Published Apr 10, 2026

Critical Risk

0.0.1 - 3.1.3

Fixed in 3.1.4

Are you affected? Scan for Free

TL;DR

This module does not sufficiently block access, leading to a authentication bypass vulnerability.

You are affected if you are using a version that falls within the vulnerable range.

drupal/miniorange_saml is vulnerable to Authentication Bypass in versions 0.0.1 - 3.1.3.

Upgrade the drupal/miniorange_saml library to the patch version.

Critical Risk

0.0.1 - 3.1.3

Fixed in 3.1.4

Are you affected? Scan for Free

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

Security

Stay up to date with all updates

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US