[MEDIUM] SimpleSAMLphp Reflected Cross-site Scripting vulnerability

PKSA-cs5w-msn4-qr4z GHSA-vpr3-cw3h-prw8

Affected version: >=1.12.0,<1.17.3

Reported by:
GitHub

[LOW] Log injection in SimpleSAMLphp

PKSA-g1nk-699g-2gbq CVE-2020-5225 GHSA-6gc6-m364-85ww

Affected version: <1.18.4

Reported by:
GitHub

[CRITICAL] Reflected Cross-Site-Scripting

PKSA-3x8n-wm49-n67d GHSA-fjr2-r2mp-484p

Affected version: >=1.12.0,<1.13.0|>=1.13.0,<1.14.0|>=1.14.0,<1.15.0|>=1.15.0,<1.16.0|>=1.16.0,<1.17.0|>=1.17.0,<1.17.3

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Credentials exposure in session storage

PKSA-ytw1-2sfw-nwys GHSA-7wh8-jrq7-p27f

Affected version: >=1.16.0,<1.16.3

Reported by:
GitHub, FriendsOfPHP/security-advisories

[LOW] Information disclosure of source code

PKSA-x565-3dmv-75hd CVE-2020-5301 GHSA-24m3-w8g9-jwpq

Affected version: <1.18.6

Reported by:
GitHub, FriendsOfPHP/security-advisories