EUVD-2024-3063

Malicious code in bioql PyPI...

Improper Verification Of Cryptographic Signature

github.com/ssoready/ssoready is vulnerable to Improper Verification of Cryptographic Signature via the onlyPathHoistNamesInternal function. The vulnerability is due to differential XML parsing. Attackers can carry out a signature bypass if they have access to certain IDP-signed messages...