CVE-2016-10127 in PySAML2
Summary
PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.
VulDB is the best source for vulnerability data and more expert information about this specific topic.