Potential Vulnerability VU#475445?

robrichards / xmlseclibs

A PHP library for XML Security

BSD 3-Clause "New" or "Revised" License

387 stars 181 forks source link

Potential Vulnerability VU#475445? #163

Closed runcoach closed 5 years ago

runcoach commented 6 years ago

I was specifically asked about this vulnerability today. xmlseclibs does not appear on the affected or not affected list. Just putting it on the radar https://www.kb.cert.org/vuls/id/475445

robrichards commented 6 years ago

@runcoach I don't believe so otherwise OneLogin's php implementation would have been flagged as well and I haven't heard anything regarding the issue

robrichards commented 6 years ago

Thanks, Yes there are a couple of more changes that need to go in before I make a release. Will leave this open until then

robrichards commented 5 years ago

The finally changes have been pushed in 3.0.2