AZL-69857

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-69857.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-69857

Upstream

CVE-2025-46705

Published

2025-11-05T15:15:38Z

Modified

2026-04-01T05:21:38.459482Z

Summary

CVE-2025-46705 affecting package lasso 2.8.0-1

Details

A denial of service vulnerability exists in the gassertnot_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-46705

Affected packages

Azure Linux:2 / lasso

Package

Name: lasso
Purl: pkg:rpm/azure-linux/lasso

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

2.8.0-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-69857.json"