Response Wrapping Attacks

Python3-saml is vulnerable to response wrapping attacks. These attacks are possible in environments supporting EncryptedAssertion. The signature validation didn't verify the the number of locations and signed elements matched the expected numbers...

External XML Entity (XXE) Attacks

python3-saml is vulnerable to external XML entity XXE attacks. These attacks are possible through the abuse of XML...