Moov-io vulnerabilities
We track 1 vulnerability in Moov-io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Moov-io vulnerabilities
- 7.5 High severity
signedxml: Uncontrolled Resource Consumption
Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signature checks