VYPR

soapbar

by Hitoshyamamoto

CVEs (1)

  • CVE-2026-64855HigNov 11, 2026
    risk 0.46cvss 8.2epss —

    soapbar is a SOAP library for Python — client, server, and WSDL handling. Prior to version 0.13.0, verify_envelope_bsp() derived its trust anchor from the message it was verifying. It read the X.509 certificate out of the caller-untrusted wsse:BinarySecurityToken, validated…