All products

signxml

PyPI · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attackCVE-2025-48994 · GHSA-6VX8-PCWV-XHF4Version ranges need review. signxml PyPI Medium Fix reported
SignXML's signature verification with HMAC is vulnerable to a timing attackCVE-2025-48995 · GHSA-GMHF-GG8W-JW42Version ranges need review. signxml PyPI Medium Fix reported