Skip to content
OpenAdvisories
High DSA-4630-1 1 CVE

python-pysaml2 - security update

Published Feb 21, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 python-pysaml2 4.5.0-4+deb10u1
Debian · 9 python-pysaml2 3.0.0-5+deb9u1

Vulnerabilities 1

  • High 7.5
    CVE-2020-5390

    Improper Verification of Cryptographic Signature in PySAML2

    PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in diffe…

    pysaml2 python-pysaml2 python-pysaml2 Debian Ubuntu PyPI