floragunn — Vulnerabilities & Security Advisories 16

Floragunn develops identity and access management solutions for enterprise applications, with its flagship product being an open-source SSO server. Historically, the project has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 16 recorded CVEs. Notable security characteristics include its Java-based architecture and integration with various authentication protocols. While no major public security incidents have been widely documented, the consistent discovery of RCE vulnerabilities in its authentication and session management components has raised concerns among security researchers regarding input validation and secure coding practices within the platform.