https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:09:15.303317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02841 bdu:2024-02841 2026-10-09T08:09:15.309556+00:00 bdu:2024-02841 https://cve.radiocsirt.org/vuln/euvd-2026-22097 EUVD-2026-22097 2026-10-09T08:09:15.309587+00:00 EUVD-2026-22097 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21238 fkie_cve-2021-21238 2026-10-09T08:09:15.309601+00:00

PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0.

 https://cve.radiocsirt.org/vuln/ghsa-f4g9-h89h-jgv9 GHSA-f4g9-h89h-jgv9 — SAML XML Signature wrapping in PySAML2 2026-10-09T08:09:15.309629+00:00

Affected: PyPI: pysaml2

### Impact

All users of pysaml2 that use the default `CryptoBackendXmlSec1` backend and need to verify signed SAML documents are impacted. `pysaml2 <= 6.4.1` does not validate the SAML document against an XML schema. This allows invalid XML documents to trick the verification process, by presenting elements with a valid signature inside elements whose content has been malformed. The verification is offloaded to `xmlsec1` and `xmlsec1` will not validate every signature in the given document, but only the first it finds in the given scope.

### Patches

Users should upgrade to pysaml2 `v6.5.0`.

### Workarounds

No workaround provided at this point.

### References

No references provided at this point.

### Credits

- Victor Schönfelder Garcia (isits AG International School of IT Security) - Juraj Somorovsky (Paderborn University) - Vladislav Mladenov (Ruhr University Bochum)

### For more information

If you have any questions or comments about this advisory: * Open an issue in [pysaml2](https://github.com/IdentityPython/pysaml2) * Email us at [the incident-response address](mailto:incident-response@idpy.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-21238 gsd-2021-21238 2026-10-09T08:09:15.309668+00:00 gsd-2021-21238 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11258-1 openSUSE-SU-2024:11258-1 — python36-pysaml2-7.0.1-1.2 on GA media 2026-10-09T08:09:15.309680+00:00

python36-pysaml2-7.0.1-1.2 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2021-48 PYSEC-2021-48 2026-10-09T08:09:15.309696+00:00

Affected: PyPI: pysaml2

PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21238 UBUNTU-CVE-2021-21238 2026-10-09T08:09:15.309715+00:00

Affected: Ubuntu:Pro:16.04:LTS: python-pysaml2, Ubuntu:18.04:LTS: python-pysaml2, Ubuntu:20.04:LTS: python-pysaml2, Ubuntu:22.04:LTS: python-pysaml2

PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0.