PT-2026-145260

soapbar is a SOAP library for Python — client, server, and WSDL handling. Prior to version 0.13.0, verify envelope bsp derived its trust anchor from the message it was verifying. It read the X.509 certificate out of the caller-untrusted wsse:BinarySecurityToken, validated only that certificate's...