Update pysaml2 to fix known vulnerability
ayr-ton opened this issue · 1 comments
ayr-ton commented
https://github.com/ayr-ton/kamu/network/alerts
Currently, there's no updated version that fixes this issue, I'm one of the maintainers of this plugin.
As this plugin is not an authentication backend for Django we may or update the plugin for supporting this or migrate to a new one that supports this.
Also, there's always the possibility of just fixing the initialization vector across encryptions and release a new plugin version with this.
macecchi commented
pysaml2 was already updated.