https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:58:48.861560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-11427 CVE-2017-11427 — Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal 2026-10-03T06:58:48.863253+00:00

Affected: OneLogin PythonSAML

OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

 https://cve.radiocsirt.org/vuln/ghsa-j8j8-348v-wfm3 GHSA-j8j8-348v-wfm3 — Python-saml allows manipulation of SAML data without invalidation of cryptographic signature 2026-10-03T06:58:48.863317+00:00

Affected: PyPI: python-saml

OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.