| id: GO-2026-5894 |
| modules: |
| - module: github.com/casdoor/casdoor |
| unsupported_versions: |
| - last_affected: 1.1000.1-0.20260321120606-239e8bd69487 |
| vulnerable_at: 1.1000.0 |
| summary: Casdoor does not validate the AudienceRestriction element in SAML assertions in github.com/casdoor/casdoor |
| cves: |
| - CVE-2026-9093 |
| ghsas: |
| - GHSA-3w4h-g9f5-j84p |
| references: |
| - advisory: https://github.com/advisories/GHSA-3w4h-g9f5-j84p |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-9093 |
| - web: https://kb.cert.org/vuls/id/780781 |
| source: |
| id: GHSA-3w4h-g9f5-j84p |
| created: 2026-07-06T17:40:53.812657948-04:00 |
| review_status: UNREVIEWED |
