pypi package report

Is github.com/russellhaering/gosaml2 safe?

1 known vulnerability, worst severity MEDIUM.

cvss

9.8

how bad it is if exploited, out of 10

epss

2.1%

chance of exploitation in the next 30 days

xyz score

2.2

CyberXYZ composite, out of 10

fig. 01 — GHSA-xhqq-x44f-9fgg, the advisory selected below

// advisories

GHSA-xhqq-x44f-9fgg

MEDIUMCVE-2020-29509

Given a valid SAML Response, it may be possible for an attacker to mutate the XML document in such a way that gosaml2 will trust a different portion of the document than was signed.

Affected: >=0, <1.17.0
Fixed in: 0.6.0
Published: 2022-02-11
Source: github

GHSA NVD MITRE

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 01:47 UTC. The most recent advisory here was published 2022-02-11. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is github.com/russellhaering/gosaml2 safe? pypi package security report | CyberXYZ