{"id":"GHSA-c27r-x354-4m68","aliases":[],"status":"published","title":"xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion","description":"### Impact\nAn attacker can inject an HMAC-SHA1 signature that is valid using only knowledge of the RSA public key. This allows bypassing signature validation.\n\n### Patches\nVersion 2.0.0 has the fix.\n\n### Workarounds\nThe recommendation is to upgrade. In case that is not possible remove the 'http://www.w3.org/2000/09/xmldsig#hmac-sha1' entry from SignedXml.SignatureAlgorithms.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2020-10-27T20:39:46Z","modified":"2023-01-11T05:08:11Z","fixes":[{"ecosystem":"npm","package":"xml-crypto","fixed_in":["2.0.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"xml-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.5.3"},{"fixed":"2.0.0"}]}]},{"source":"osv","ecosystem":"npm","package":"xml-crypto","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.0.0"}]}]}],"references":[{"url":"https://github.com/yaronn/xml-crypto/security/advisories/GHSA-c27r-x354-4m68","tags":["web"]},{"url":"https://github.com/yaronn/xml-crypto/commit/3d9db712e6232c765cd2ad6bd2902b88a0d22100","tags":["web"]},{"url":"https://www.npmjs.com/package/xml-crypto","tags":["web"]},{"url":"https://github.com/advisories/GHSA-c27r-x354-4m68"},{"url":"https://github.com/yaronn/xml-crypto","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-c27r-x354-4m68","title":"xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion","description":"### Impact\nAn attacker can inject an HMAC-SHA1 signature that is valid using only knowledge of the RSA public key. This allows bypassing signature validation.\n\n### Patches\nVersion 2.0.0 has the fix.\n\n### Workarounds\nThe recommendation is to upgrade. In case that is not possible remove the 'http://www.w3.org/2000/09/xmldsig#hmac-sha1' entry from SignedXml.SignatureAlgorithms.","status":"published","published":"2020-10-27T20:39:46Z","modified":"2023-01-11T05:08:11Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:36:13.23016Z"}],"osv":[{"id":"GHSA-c27r-x354-4m68","title":"xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion","description":"### Impact\nAn attacker can inject an HMAC-SHA1 signature that is valid using only knowledge of the RSA public key. This allows bypassing signature validation.\n\n### Patches\nVersion 2.0.0 has the fix.\n\n### Workarounds\nThe recommendation is to upgrade. In case that is not possible remove the 'http://www.w3.org/2000/09/xmldsig#hmac-sha1' entry from SignedXml.SignatureAlgorithms.","status":"published","published":"2020-10-27T20:39:46Z","modified":"2022-08-02T20:03:05Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:46:44.225359Z"}]}}