PyPI/pysaml2 CVE-2021-21238: medium 6.5, EPSS 1.10%

SAML XML Signature wrapping in PySAML2

Action: Upgrade pysaml2 to 6.5.0 or later.

pip install pysaml2==6.5.0

Affected

Fixed versions

Sources

• osv: GHSA-f4g9-h89h-jgv9
• https://github.com/IdentityPython/pysaml2/security/advisories/GHSA-f4g9-h89h-jgv9
• https://nvd.nist.gov/vuln/detail/CVE-2021-21238
• https://github.com/IdentityPython/pysaml2/commit/1d8fd268f5bf887480a403a7a5ef8f048157cc14
• https://github.com/IdentityPython/pysaml2
• https://github.com/IdentityPython/pysaml2/releases/tag/v6.5.0
• https://github.com/pypa/advisory-database/tree/main/vulns/pysaml2/PYSEC-2021-48.yaml
• https://pypi.org/project/pysaml2

CVE-2021-21238 · published 2021-01-21T14:12:16Z · modified 2026-09-10T03:49:13.856780354Z · JSON