CVE-2025-46784

A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

• CWE-401

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2195Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2195Exploit, Third Party Advisory

Published

Nov 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-46779Rejected reason: Not used
• CVE-2025-4678Improper Neutralization of Special Elements in the chromium_…7
• CVE-2025-46780Rejected reason: Not used
• CVE-2025-46781Rejected reason: Not used
• CVE-2025-46782Rejected reason: Not used
• CVE-2025-46783Path traversal vulnerability exists in RICOH Streamline NX V…9.8
• CVE-2025-46785Buffer over-read in some Zoom Workplace Apps for Windows may…6.5
• CVE-2025-46786Cross-site scripting in some Zoom Workplace Apps may allow a…6.1
• CVE-2025-46788Improper certificate validation in Zoom Workplace for Linux …9.1
• CVE-2025-46789Classic buffer overflow in certain Zoom Clients for Windows …6.5
• CVE-2025-4679A vulnerability in Synology Active Backup for Microsoft 365 …6.5
• CVE-2025-4680Improper Input Validation vulnerability in upKeeper Solution…8.6