asgardeo / asgardeo/asgardeo-java-saml-sdk

Outdated OpenSAML version

Open
#31 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
14
Forks
16
PR merge metrics
No merged PRs in 30d

Description

This is just a heads-up to the maintainers if you are not aware of this: You are depending on an outdated version of OpenSAML, which has known security vulnerabilities. In fact, the latest OpenSAML releases are no longer even being published to maven central (intentionally). The OpenSAML developers also explicitly do not recommend using their library anywhere outside of Shibboleth.

For more info, see their [documentation](https://shibboleth.atlassian.net/wiki/spaces/OSAML/overview) .

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no repository files, tests, or concrete remediation. Start by locating the OpenSAML dependency declaration and review the linked OpenSAML documentation; completion requires maintainers to specify an agreed fix for the vulnerable dependency.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.