Hello,
I wanted to confirm with the community if Open edX is using OpenSAML and therefore, would be impacted by the recently discovered Shibboleth vulnerability: https://shibboleth.net/community/advisories/secadv_20250313.txt
Thanks in advance for any feedback and/or confirmation!
sarina
(Sarina Canelake)
2
@feanil could we get your perspective here?
1 Like
braden
(Braden MacDonald (OpenCraft) - opencraft.com/help)
3
No, the SAML support in Open edX uses python3-saml via python-social-auth. It is a python implementation and doesn’t use OpenSAML.