Timlegge Xml::sig vulnerabilities
- timlegge xml::sig, xml\ \ +1 more XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check 7.5 High
- timlegge xml::sig, xml\ \ +1 more XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID 9.1 Critical
- timlegge xml::sig, xml\ \ +1 more XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup 9.1 Critical
- timlegge xml::sig, xml\ \ +1 more XML-Sig prior to 0.68 for Perl improperly validates XML without signatures 9.3 Critical