Description
XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| github.com/RobotsAndPencils/go-saml | github.com/RobotsAndPencils/go-saml | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/RobotsAndPencils/go-saml | <= 0.0.0-20170520135329-fb13cb52a46b | — | GHSA-5rhg-xhgr-5hfj |
| Go | github.com/RobotsAndPencils/go-saml | all versions | — | GO-2020-0047 |