github.com/russellhaering/goxmldsig

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-33487

goxmldsig has validateSignature Loop Variable Capture Signature Bypass

goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the references in the `SignedInfo` block to find one that matches the signed element's ID. In Go versions before…

russellhaering goxmldsig rancher-agent-2.13 dex Wolfi Go

Mar 26, 2026
High 7.5

CVE-2020-7711

Denial of Service (DoS)

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

github.com/russellhaering/gosaml2 github.com/russellhaering/goxmldsig golang-github-russellhaering-goxmldsig golang-github-russellhaering-goxmldsig Debian Ubuntu Go

Aug 23, 2020