asgardeo / asgardeo/asgardeo-java-saml-sdk
Outdated OpenSAML version
- Dominant language
- Java
- Stars
- 14
- Forks
- 16
- PR merge metrics
- No merged PRs in 30d
Description
This is just a heads-up to the maintainers if you are not aware of this: You are depending on an outdated version of OpenSAML, which has known security vulnerabilities. In fact, the latest OpenSAML releases are no longer even being published to maven central (intentionally). The OpenSAML developers also explicitly do not recommend using their library anywhere outside of Shibboleth.
For more info, see their [documentation](https://shibboleth.atlassian.net/wiki/spaces/OSAML/overview) .
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue names no repository files, tests, or concrete remediation. Start by locating the OpenSAML dependency declaration and review the linked OpenSAML documentation; completion requires maintainers to specify an agreed fix for the vulnerable dependency.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100