xml-crypto vulnerabilities (npm)
4 vulnerabilities.
-
xml-cryptonpm xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment 9.3 Critical -
xml-cryptonpm xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References 9.3 Critical -
xml-cryptonpm XML signature verification bypass due improper verification of signature / signature spoofing 10.0 Critical -
xml-cryptonpm xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion No score