Search results

MetadataManager returns random idp from the list of registered

Status: Open.

#527 In spring-attic/spring-security-saml;

· LapitskiyKirill opened on Jun 7, 2022

Update esapi version for CVE-2022-23457

Status: Open.

#525 In spring-attic/spring-security-saml;

· OrangeDog opened on May 10, 2022

Update esapi version for vulernability CVE-2022-23437 to 2.2.3.0 or greater

Status: Open.

#523 In spring-attic/spring-security-saml;

· row49382 opened on Feb 28, 2022

CSP issue velocityTemplateId on HTTPPostBinding

Status: Open.

#522 In spring-attic/spring-security-saml;

· flinden68 opened on Feb 22, 2022

Compatibility with Spring 6

Status: Open.

#521 In spring-attic/spring-security-saml;

· OrangeDog opened on Jan 25, 2022

Dependency cycle with SAMLEntryPoint

Status: Open.

#518 In spring-attic/spring-security-saml;

· OrangeDog opened on Nov 22, 2021

Update Venocity for CVE-2021-29425 Mitigation

Status: Open.

#513 In spring-attic/spring-security-saml;

· jasonparallel opened on Apr 20, 2021

VelocityFactory sets invalid properties

Status: Open.

#512 In spring-attic/spring-security-saml;

· OrangeDog opened on Apr 13, 2021

wrongly setting empty to a null Set<String>

Status: Open.

#510 In spring-attic/spring-security-saml;

· TohidHeshmati opened on Mar 26, 2021

wrong descriptor and extended metadata are loaded to context, when IDP and SP share the same entityID

Status: Open.

#506 In spring-attic/spring-security-saml;

· edisonleonardo opened on Nov 20, 2020

Encrypted assertions from Response lose reference to parent document

in: coreAn issue in spring-security-saml-coreAn issue in spring-security-saml-core

type: enhancementA general enhancementA general enhancement

Status: Open.

#504 In spring-attic/spring-security-saml;

· davidjayb opened on Nov 6, 2020

AbstractProfileBase#generateID uses Random() instead of SecureRandom()

Status: Open.

#502 In spring-attic/spring-security-saml;

· gstanchev opened on Oct 26, 2020