←back to thread

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials

(github.blog)
312 points campuscodi | 2 comments | 15 Mar 25 19:06 UTC | HN request time: 0.586s | source
1. malkia ◴[15 Mar 25 22:43 UTC] No.43375632[source]▶
Maybe asking stupid question, but would older versions of puppet be affected (like 6?). Also is there a site to check deps down to what maybe affected?
replies(1): >>43375766 #
2. TZubiri ◴[15 Mar 25 23:08 UTC] No.43375766[source]▶
Try dependabot? But it's a tool by github, maybe better not to depend on a self reporylt