CVE-2026-105270

Name of the Vulnerable Software and Affected Versions esaml versions 0.1.0 and later

Description An unauthenticated attacker can cause a denial of service by crashing the node through the exhaustion of the Erlang VM atom table. This occurs when the esaml binding:decode response/2 function parses a crafted SAMLResponse using xmerl scan:string/2, which converts every element name, attribute name, and namespace prefix into a permanent atom. Because these atoms are never reclaimed and the VM has a limit of approximately one million entries, a small number of requests containing thousands of distinct names can abort the node. This process happens at the SAML consume (ACS) and single-logout endpoints before any signature checks or assertion validations are performed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.