xml_crypto vulnerabilities

1 known vulnerability in xml_crypto from Node Saml Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  xml-crypto: Improper Verification of Cryptographic Signature

  CVE-2024-32962May 2, 2024Node-saml

  xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610