Skip to content

CVE record · 1 source

CVE-2026-123798

CVSS 8.1

SuperTokens Core is an open source authentication server.

Vendor: Supertokens
Product: supertokens-core
CVSS v3.1: 8.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-287, CWE-347
Exposure class: Web platform, Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

42

CVE NVD 2h ago

SuperTokens Core is an open source authentication server.

SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.7, 11.4.7, and 12.0.10, SAML.verifySamlResponseSignature calls OpenSAML SignatureValidator.validate without first applying…

CVSS 8.1 Fix available CVE-2026-123798 Supertokens