signxml vulnerabilities (PyPI)

2 vulnerabilities.

• signxml PyPI SignXML's signature verification with HMAC is vulnerable to a timing attack CVE-2025-48995 Fix available 6.9 MediumJune 2, 2025
• signxml PyPI SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack CVE-2025-48994 Fix available 6.9 MediumJune 2, 2025