Cross-site Request Forgery (CSRF)

Overview apache-airflow-providers-amazon is a Provider for Apache Airflow. Implements apache-airflow-providers-amazon package Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the AWS auth manager SAML login flow, where login discards the AuthnRequest id...

python313-python3-saml-1.16.0-2.4 on GA media (moderate)

python313-python3-saml-1.16.0-2.4 on GA media Announcement ID: openSUSE-SU-2026:12034-1 Rating: moderate Cross-References: CVE-2017-11427 CVSS scores: CVE-2017-11427 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:12034-1 python313-python3-saml-1.16.0-2.4 on GA media

These are all security issues fixed in the python313-python3-saml-1.16.0-2.4 package on the GA media of openSUSE Tumbleweed...

PT-2026-105743

These are all security issues fixed in the python313-python3-saml-1.16.0-2.4 package on the GA media of openSUSE Tumbleweed...

Response Wrapping Attacks

Python3-saml is vulnerable to response wrapping attacks. These attacks are possible in environments supporting EncryptedAssertion. The signature validation didn't verify the the number of locations and signed elements matched the expected numbers...

External XML Entity (XXE) Attacks

python3-saml is vulnerable to external XML entity XXE attacks. These attacks are possible through the abuse of XML...