Goxmldsig Project Goxmldsig
3 CVEs affecting Goxmldsig Project Goxmldsig. Latest disclosed: 2026-03-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33487 | High | 7.5 | 2026-03-26 | goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the referenc… |
CVE-2020-7711 | High | 7.5 | 2020-08-23 | This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signature… |
CVE-2020-15216 | Medium | 5.3 | 2020-09-29 | In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signatu… |