https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:15:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02666 bdu:2024-02666 https://cve.radiocsirt.org/vuln/bdu:2024-02666 https://cve.radiocsirt.org/vuln/euvd-2026-10171 EUVD-2026-10171 https://cve.radiocsirt.org/vuln/euvd-2026-10171 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49087 <p>xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree (the one that contains the DigestValue) verifies and matches a trusted public key. If an attacker somehow (i.e. by exploiting a bug in PHP&#39;s canonicalization function) manages to manipulate the canonicalized version&#39;s DigestValue, it would be possible to forge the signature. This issue has been patched in version 1.6.12 and 5.0.0-alpha.13.</p> <p>xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree (the one that contains the DigestValue) verifies and matches a trusted public key. If an attacker somehow (i.e. by exploiting a bug in PHP&#39;s canonicalization function) manages to manipulate the canonicalized version&#39;s DigestValue, it would be possible to forge the signature. This issue has been patched in version 1.6.12 and 5.0.0-alpha.13.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-49087 https://cve.radiocsirt.org/vuln/ghsa-ww7x-3gxh-qm6r <p><strong>Affected:</strong> Packagist: simplesamlphp/xml-security, Packagist: simplesamlphp/saml2</p> <p>Validation of an XML Signature requires verification that the hash value of the related XML-document (after any optional transformations and/or normalizations) matches a specific DigestValue-value, but also that the cryptografic signature on the SignedInfo-tree (the one that contains the DigestValue) verifies and matches a trusted public key.</p> <p>Within the simpleSAMLphp/xml-security library (https://github.com/simplesamlphp/xml-security), the hash is being validated using SignedElementTrait::validateReference, and the signature is being verified in SignedElementTrait::verifyInternal</p> <p>https://github.com/simplesamlphp/xml-security/blob/master/src/XML/SignedElementTrait.php:</p> <p></p> <p>What stands out is that the signature is being calculated over the canonical version of the SignedInfo-tree. The validateReference method, however, uses the original non-canonicalized version of SignedInfo.</p> <p>### Impact If an attacker somehow (i.e. by exploiting a bug in PHP&#39;s canonicalization function) manages to manipulate the canonicalized version&#39;s DigestValue, it would be potentially be possible to forge the signature. No possibilities to exploit this were found during the investigation.</p> <p><strong>Affected:</strong> Packagist: simplesamlphp/xml-security, Packagist: simplesamlphp/saml2</p> <p>Validation of an XML Signature requires verification that the hash value of the related XML-document (after any optional transformations and/or normalizations) matches a specific DigestValue-value, but also that the cryptografic signature on the SignedInfo-tree (the one that contains the DigestValue) verifies and matches a trusted public key.</p> <p>Within the simpleSAMLphp/xml-security library (https://github.com/simplesamlphp/xml-security), the hash is being validated using SignedElementTrait::validateReference, and the signature is being verified in SignedElementTrait::verifyInternal</p> <p>https://github.com/simplesamlphp/xml-security/blob/master/src/XML/SignedElementTrait.php:</p> <p></p> <p>What stands out is that the signature is being calculated over the canonical version of the SignedInfo-tree. The validateReference method, however, uses the original non-canonicalized version of SignedInfo.</p> <p>### Impact If an attacker somehow (i.e. by exploiting a bug in PHP&#39;s canonicalization function) manages to manipulate the canonicalized version&#39;s DigestValue, it would be potentially be possible to forge the signature. No possibilities to exploit this were found during the investigation.</p> https://cve.radiocsirt.org/vuln/ghsa-ww7x-3gxh-qm6r https://cve.radiocsirt.org/vuln/gsd-2023-49087 gsd-2023-49087 https://cve.radiocsirt.org/vuln/gsd-2023-49087