Skip to content
OpenAdvisories

Vendor

russellhaering

3 known vulnerabilities.

Products

goxmldsig 2 gosaml2 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-33487

    goxmldsig has validateSignature Loop Variable Capture Signature Bypass

    goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the references in the `SignedInfo` block to find one that matches the signed element's ID. In Go versions before…

    russellhaering goxmldsig rancher-agent-2.13 dex Wolfi Go