https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 09:07:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-42750 EUVD-2026-42750 https://cve.radiocsirt.org/vuln/euvd-2026-42750 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15216 <p>In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0</p> <p>In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15216 https://cve.radiocsirt.org/vuln/ghsa-q547-gmf8-8jr7 <p><strong>Affected:</strong> Go: github.com/russellhaering/goxmldsig</p> <p>### Impact With a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one.</p> <p>### Patches A patch is available, all users of goxmldsig should upgrade to v1.1.0.</p> <p>### For more information If you have any questions or comments about this advisory open an issue at https://github.com/russellhaering/goxmldsig</p> <p><strong>Affected:</strong> Go: github.com/russellhaering/goxmldsig</p> <p>### Impact With a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one.</p> <p>### Patches A patch is available, all users of goxmldsig should upgrade to v1.1.0.</p> <p>### For more information If you have any questions or comments about this advisory open an issue at https://github.com/russellhaering/goxmldsig</p> https://cve.radiocsirt.org/vuln/ghsa-q547-gmf8-8jr7 https://cve.radiocsirt.org/vuln/gsd-2020-15216 gsd-2020-15216 https://cve.radiocsirt.org/vuln/gsd-2020-15216 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15216 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-russellhaering-goxmldsig, Ubuntu:20.04:LTS: golang-github-russellhaering-goxmldsig, Ubuntu:22.04:LTS: golang-github-russellhaering-goxmldsig</p> <p>In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-russellhaering-goxmldsig, Ubuntu:20.04:LTS: golang-github-russellhaering-goxmldsig, Ubuntu:22.04:LTS: golang-github-russellhaering-goxmldsig</p> <p>In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15216