VYPR

SAML SSO

by Oneuptime

CVEs (1)

  • CVE-2026-34840HigApr 2, 2026
    risk 0.46cvss 8.1epss 0.00

    OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation (App/FeatureSet/Identity/Utils/SSO.ts) has decoupled signature verification and identity extraction. isSignatureValid() verifies the first …