GMS-2017-111: Vulnerability in signature verification

February 28, 2017

An error during signature verification can be treated as a successful verification.

References

github.com/onelogin/php-saml/commit/949359f5cad5e1d085c4e5447d9aa8f49a6e82a1

Code Behaviors & Features

Detect and mitigate GMS-2017-111 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →