jump-app vulnerabilities

Products

• esaml 1

Latest jump-app CVEs

Newest publication first

1. CVE-2026-28809 XXE in esaml SAML library allows local file read and potential SSRF

   Published 2026-03-23

   Medium·CVSS 6.3 EPSS 0.29%

   XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into processed SAML documents, and potentially perform SSRF via crafted SAML messages. esaml parses attacker-controlled SAML...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.