Skip to content
OpenAdvisories
High DLA-2119-1 1 CVE

python-pysaml2 - security update

Published Feb 26, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 python-pysaml2 2.0.0-1+deb8u3

Vulnerabilities 1

  • High 7.5
    CVE-2020-5390

    Improper Verification of Cryptographic Signature in PySAML2

    PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in diffe…

    pysaml2 python-pysaml2 python-pysaml2 Debian Ubuntu PyPI