Skip to content
OpenAdvisories

Package · Go

github.com/moov-io/signedxml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2023-34205

    Signature validation bypass in github.com/moov-io/signedxml

    In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).

    github.com/moov-io/signedxml Go