#2346 SAML extension - Libxml2 Canonicalization error can bypass Digest/Signature validation

[Tommaso Rossi]

Hello,
the combodo-saml extension version 1.2.2 (latest published) uses robrichards/xmlseclibs version 3.1.3, which contains severe vulnerability: https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-c4cc-x928-vjw9 .
This was fixed in version 3.1.4 of that library.

[BenGrenoble]

Hello,

Thanks a lot for your feedback
I'm creating a bug.

Best regards,