Xml-security Signxml vulnerabilities

• xml-security signxml SignXML's signature verification with HMAC is vulnerable to a timing attack CVE-2025-48995 Fix available 6.9 MediumJune 2, 2025
• xml-security signxml SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack CVE-2025-48994 Fix available 6.9 MediumJune 2, 2025