Skip to content

Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler

Low severity GitHub Reviewed Published Apr 11, 2026 in kimai/kimai • Updated Apr 14, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts