Package · Ubuntu

libxml-security-java

3 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

Medium 6.5

CVE-2023-44483

Apache Santuario: Private Key disclosure in debug-log output

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level i…

Apache Software Foundation Apache Santuario org.apache.santuario:xmlsec libxml-security-java Debian Ubuntu Maven

Oct 20, 2023
Medium 5.5

CVE-2019-12400

Improper input validation in Apache Santuario XML Security for Java

In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread…

Apache Apache Santuario - XML Security for Java org.apache.santuario:xmlsec libxml-security-java Debian Ubuntu Maven

Aug 23, 2019