High DSA-3759-1 1 CVE

python-pysaml2 - security update

Published Jan 12, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	python-pysaml2	2.0.0-1+deb8u1

Vulnerabilities 1

High 7.5

CVE-2016-10149

Pysaml2 does not sanitize XML responses

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.

pysaml2 python-pysaml2 python-pysaml2 Debian Ubuntu PyPI

Mar 24, 2017