XML External Entity (XXE) Vulnerability for v7.5.4 #1020
Description
Hi i am using pysaml2 library in my code and it is getting flagged for XML External Entity (XXE)
The full vulnerability explanation as below:
The pysaml2 package is vulnerable to an XML External Entity (XXE) attack. The package uses defusedxml to process the uploaded XML document without properly validating the document type definition (DTD) attribute values as forbid_dtd is not enabled by default.
NOTE: This vulnerability has been assigned CVE-2017-1000061.
May I know if there is a fix in place for this? Thank you.