signedxml vulnerabilities

1 known vulnerability in signedxml from Moov-io. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  signedxml: Uncontrolled Resource Consumption

  CVE-2026-113729Oct 20, 2026Moov-io

  Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signature checks