python313-pysaml2-7.5.4-1.1 on GA media (moderate)

python313-pysaml2-7.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11524-1 Rating: moderate Cross-References: CVE-2020-5390 CVE-2021-21238 CVE-2021-21239 CVSS scores: CVE-2020-5390 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-21238 SUSE : 6.5...

djangosaml2 (0.16.11), irisrelay (1.2.1) +1 more potentially affected by CVE-2020-5390 via pysaml2 (4.4.0)

pysaml2 PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - djangosaml2 0.16.11 - irisrelay 1.2.1 - satosa =3.4.2, =3.4.8 Source cves: CVE-2020-5390 Source advisory: OSV:GHSA-QF7V-8HJ3-4XW7...

[SECURITY] [DSA 4630-1] python-pysaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4630-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 21, 2020 https://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-4245-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5390

PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...

satosa (>=3.3.1, <=3.4.0) potentially affected by CVE-2020-5390 via pysaml2 (4.2.0)

pysaml2 PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - satosa =3.3.1, =3.4.0 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

djangosaml2 (0.16.11), irisrelay (1.2.1) +1 more potentially affected by CVE-2020-5390 via pysaml2 (4.4.0)

pysaml2 PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - djangosaml2 0.16.11 - irisrelay 1.2.1 - satosa =3.4.2, =3.4.8 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

django-saml2-auth (>=1.0.2b1, <=1.1.4), django-saml2-auth-custom (>=1.0.0, <=1.0.4) potentially affected by CVE-2020-5390 via pysaml2 (4.0.5)

pysaml2 PYPI version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - django-saml2-auth =1.0.2b1, =1.0.0, =1.0.4 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2020-5390 via pysaml2 (4.6.5)

pysaml2 PYPI version 4.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

CVE-2020-5390

PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...

satosa (>=0.6.1, <=3.2.1) potentially affected by CVE-2020-5390 via pysaml2 (4.0.3)

pysaml2 PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - satosa =0.6.1, =3.2.1 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

irisrelay (>=1.1.1, <=1.2.0) potentially affected by CVE-2020-5390 via pysaml2 (4.8.0)

pysaml2 PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - irisrelay =1.1.1, =1.2.0 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

CVE-2020-5390

PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...

CVE-2020-5390

PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...

CVE-2020-5390

CVE-2020-5390 affects PySAML2 prior to 5.0.0 where SAML signature enveloping is not checked, enabling XML Signature Wrapping (XSW) and causing the verification to succeed while using the wrong data (e.g., assertions). The connected documents indicate a fix is available: PySAML2 patch CVE-2020-539...