Vulnerabilities for pysaml2

First version without a known vulnerability: 6.5.0

Details

• GHSA-m269-wj6g-c4592022-05-17

  PySAML2 XML external entity attack

  Fixed in: 4.5.0, 6e09a25d9b4b7aa7a506853210a9a14100b8bc9b

• GHSA-5p3x-r448-pc622021-01-21

  Improper Verification of Cryptographic Signature in PySAML2

  Fixed in: 6.5.0, 46578df0695269a16f1c94171f1429873f90ed99

• GHSA-f4g9-h89h-jgv92021-01-21

  SAML XML Signature wrapping in PySAML2

  Fixed in: 6.5.0, 1d8fd268f5bf887480a403a7a5ef8f048157cc14

• GHSA-qf7v-8hj3-4xw72020-05-06

  Improper Verification of Cryptographic Signature in PySAML2

  Fixed in: 5.0.0, f27c7e7a7010f83380566a219fd6a290a00f2b6e, 5e9d5acbcd8ae45c4e736ac521fd2df5b1c62e25

• GHSA-cq94-qf6q-mf2h2018-07-16

  Pysaml2 improperly initializes encryption vector

  Fixed in: 4.6.0

• GHSA-c2vx-49jm-h3f62018-07-16

  Pysaml2 does not sanitize XML responses

  Fixed in: 4.5.0, 6e09a25d9b4b7aa7a506853210a9a14100b8bc9b

• GHSA-924m-4pmx-c67h2018-07-13

  pysaml2 Improper Authentication vulnerability

  Fixed in: 4.5.0