PySAML2 could be made to bypass signature verification with arbitrary data.