https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:05:27.367847+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336139 EUVD-2026-336139 2026-10-10T22:05:27.407586+00:00 EUVD-2026-336139 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54714 fkie_cve-2026-54714 2026-10-10T22:05:27.407624+00:00

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, @logto/core reflected the SAML RelayState, SAMLResponse, and actionUrl into a Logto-origin auto-submit HTML form in packages/core/src/saml-application/SamlApplication/utils.ts without HTML-attribute escaping. A SAML application flow with a crafted RelayState from GET or POST /api/saml/:id/authn could inject script that runs on the Logto tenant origin after the user completes login. This issue is fixed in version 1.41.0.