Skip to content
OpenAdvisories

Package · Go

github.com/russellhaering/goxmldsig

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical —
    GHSA-rrfw-hg9m-j47h

    Signature Validation Bypass

    ### Impact An authentication bypass exists in the [goxmldsig](https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7) this library uses to determine if SAML assertions are genuine. An attacker could craft a SAML response that woul…

    github.com/russellhaering/goxmldsig Go
  • Critical 9.3
    CVE-2020-26290

    Critical security issues in XML encoding in Dex

    Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveraging the SAML connector. The vulnerabilities enables potential signature bypass due to issues with XML …

    dexidp dex github.com/russellhaering/goxmldsig github.com/dexidp/dex Go