https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:46:18 +0000 https://cve.radiocsirt.org/vuln/cve-2021-40690 <p><strong>Affected:</strong> Apache Software Foundation Apache Santuario</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Santuario</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> https://cve.radiocsirt.org/vuln/cve-2021-40690