https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:42:32.606398+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4325 ALSA-2021:4325 — Moderate: lasso security and enhancement update 2026-10-09T20:42:32.617022+00:00

Affected: AlmaLinux:8: lasso, AlmaLinux:8: lasso-devel

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

* lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-02957 bdu:2021-02957 2026-10-09T20:42:32.617134+00:00 bdu:2021-02957 https://cve.radiocsirt.org/vuln/certfr-2021-avi-422 certfr-2021-avi-422 — Une vulnérabilité a été découverte dans les produits Cisco. Elle permet à un attaquant de provoquer un contournement de… 2026-10-09T20:42:32.617166+00:00 certfr-2021-avi-422 https://cve.radiocsirt.org/vuln/cisco-sa-lasso-saml-jun2021-doxnrlkd cisco-sa-lasso-saml-jun2021-DOXNRLkD — Lasso SAML Implementation Vulnerability Affecting Cisco Products: June 2021 2026-10-09T20:42:32.617197+00:00

On June 1, 2021, Lasso disclosed a security vulnerability in the Lasso Security Assertion Markup Language (SAML) Single Sign-On (SSO) library. This vulnerability could allow an authenticated attacker to impersonate another authorized user when interacting with an application. For a description of this vulnerability, see lasso.git NEWS ["https://git.entrouvert.org/lasso.git/tree/NEWS?id=v2.7.0"]. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lasso-saml-jun2021-DOXNRLkD ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lasso-saml-jun2021-DOXNRLkD"]

 https://cve.radiocsirt.org/vuln/euvd-2026-25835 EUVD-2026-25835 2026-10-09T20:42:32.617249+00:00 EUVD-2026-25835 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28091 fkie_cve-2021-28091 2026-10-09T20:42:32.617278+00:00

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

 https://cve.radiocsirt.org/vuln/ghsa-5pxh-5p72-wvcm GHSA-5pxh-5p72-wvcm 2026-10-09T20:42:32.617320+00:00

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

 https://cve.radiocsirt.org/vuln/gsd-2021-28091 gsd-2021-28091 2026-10-09T20:42:32.617343+00:00 gsd-2021-28091 https://cve.radiocsirt.org/vuln/msrc_cve-2021-28091 msrc_CVE-2021-28091 — Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. 2026-10-09T20:42:32.617369+00:00 msrc_CVE-2021-28091 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1057-1 openSUSE-SU-2021:1057-1 — Security update for lasso 2026-10-09T20:42:32.617431+00:00

Security update for lasso

 https://cve.radiocsirt.org/vuln/suse-su-2021:2589-1 SUSE-SU-2021:2589-1 — Security update for lasso 2026-10-09T20:42:32.617463+00:00

Security update for lasso

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-28091 UBUNTU-CVE-2021-28091 2026-10-09T20:42:32.617487+00:00

Affected: Ubuntu:16.04:LTS: lasso, Ubuntu:18.04:LTS: lasso, Ubuntu:20.04:LTS: lasso

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.