XML External Entity (XXE) Vulnerability for v7.5.4

[GanNicholas]

Hi i am using pysaml2 library in my code and it is getting flagged for XML External Entity (XXE)

The full vulnerability explanation as below:
The pysaml2 package is vulnerable to an XML External Entity (XXE) attack. The package uses defusedxml to process the uploaded XML document without properly validating the document type definition (DTD) attribute values as forbid_dtd is not enabled by default.

NOTE: This vulnerability has been assigned CVE-2017-1000061.

May I know if there is a fix in place for this? Thank you.

[spaceone]

@c00kiemon5ter What are the plans for the several reported security issues. It looks a little bit like this project is unmaintained. There are many requests for them to be addressed. A statement from you would be good.

[spaceone]

@GanNicholas just check the version of xmlsec you are using, which tells you if you are affected.