Package · Debian

golang-github-russellhaering-goxmldsig

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.3

CVE-2020-15216

Signature Validation Bypass in goxmldsig

In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxml…

russellhaering goxmldsig github.com/russellhaering/goxmldsig golang-github-russellhaering-goxmldsig Debian Ubuntu Go

Sep 29, 2020
High 7.5

CVE-2020-7711

Denial of Service (DoS)

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

github.com/russellhaering/gosaml2 github.com/russellhaering/goxmldsig golang-github-russellhaering-goxmldsig golang-github-russellhaering-goxmldsig Debian Ubuntu Go

Aug 23, 2020