GMS-2017-111: Vulnerability in signature verification

February 28, 2017

An error during signature verification can be treated as a successful verification.

References

github.com/onelogin/php-saml/commit/949359f5cad5e1d085c4e5447d9aa8f49a6e82a1

Code Behaviors & Features

Detect and mitigate GMS-2017-111 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →