CyberSecBulletin

Russellhaering vulnerabilities

We track 1 vulnerability in Russellhaering products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Russellhaering vulnerabilities

  • 7.5 High severity

    goxmldsig: Improper Verification of Cryptographic Signature

    CVE-2026-33487Russellhaering

    goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in `validate.go` goes through the references in the `SignedInfo` block to find one that matches the signed element's ID. In Go versions before