Skip to content
OpenAdvisories

Package · Alpine

perl-xml-sig

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2025-40934

    XML-Sig prior to 0.68 for Perl improperly validates XML without signatures

    XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted. An attacker can remove the signature from the XML document to make it pass the verification check. XML-Sig is a Perl module to validate signatures on XML fi…

    TIMLEGGE XML::Sig perl-xml-sig Alpine