Russellhaering Goxmldsig

2 CVEs affecting Russellhaering Goxmldsig. Latest disclosed: 2026-03-26. Critical: 0, High: 1.

Top CVEs affecting Russellhaering Goxmldsig
CVESeverityScorePublishedSummary
CVE-2026-33487High7.52026-03-26goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the referenc…
CVE-2020-15216Medium5.32020-09-29In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signatu…