xml-crypto
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment | xml-cryptoOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 | npmRed Hat | Critical | Fix reported | |
| xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing | xml-crypto | npm | Critical | Fix reported | |
| xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References | xml-cryptoOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 | npmRed Hat | Critical | Fix reported | |
| xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion | xml-crypto | npm | High | Fix reported |