handnot2 has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.4 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.4
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

handnot2/esaml 2

Follow handnot2:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

handnot2 vulnerabilities

CVEs affecting handnot2, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-93471High· 8.7

today

Unbounded SAML message decompression in esaml allows memory exhaustion

Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust server memory and crash the Erlang VM via a crafted compressed SAMLResponse. esaml_binding:…

▾ Twilighthandnot2 · handnot2/esamlvia CVEORG

CVE-2026-86696High· 8.2

today

Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:status_co…

▾ Twilighthandnot2 · handnot2/esamlvia CVEORG