https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T13:23:22.586486+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-1000433 CVE-2017-1000433 2026-09-30T13:23:22.588298+00:00

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.

 https://vulnerability.circl.lu/vuln/usn-3520-1 USN-3520-1 — python-pysaml2 vulnerability 2026-09-30T13:23:22.588392+00:00

Affected: Ubuntu:16.04:LTS: python-pysaml2

It was discovered that PySAML2 incorrectly accepted any password when run with python optimizations enabled. An attacker could use this issue to authenticate as any user without a valid password.