https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:24:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-15984 cnvd-2019-15984 https://cve.radiocsirt.org/vuln/cnvd-2019-15984 https://cve.radiocsirt.org/vuln/euvd-2026-76691 EUVD-2026-76691 https://cve.radiocsirt.org/vuln/euvd-2026-76691 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11427 <p>OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p>OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-11427 https://cve.radiocsirt.org/vuln/ghsa-j8j8-348v-wfm3 <p><strong>Affected:</strong> PyPI: python-saml</p> <p>OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p><strong>Affected:</strong> PyPI: python-saml</p> <p>OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/ghsa-j8j8-348v-wfm3 https://cve.radiocsirt.org/vuln/gsd-2017-11427 gsd-2017-11427 https://cve.radiocsirt.org/vuln/gsd-2017-11427 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11262-1 <p>python36-python3-saml-1.11.0-1.2 on GA media</p> <p>python36-python3-saml-1.11.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11262-1 https://cve.radiocsirt.org/vuln/pysec-2019-198 <p><strong>Affected:</strong> PyPI: python-saml</p> <p>OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> <p><strong>Affected:</strong> PyPI: python-saml</p> <p>OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.</p> https://cve.radiocsirt.org/vuln/pysec-2019-198 https://cve.radiocsirt.org/vuln/suse-su-2021:0048-1 <p>Security update for python-defusedxml, python-freezegun, python-pkgconfig, python-python3-saml, python-xmlsec</p> <p>Security update for python-defusedxml, python-freezegun, python-pkgconfig, python-python3-saml, python-xmlsec</p> https://cve.radiocsirt.org/vuln/suse-su-2021:0048-1