Go/github.com/russellhaering/goxmldsig CVE-2020-7711, CVE-2020-7731: high 7.5, EPSS 1.80%

github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference

Action: Upgrade github.com/russellhaering/goxmldsig to 1.1.1 or later.

go get github.com/russellhaering/goxmldsig@v1.1.1

Affected

Fixed versions

Sources

• osv: GHSA-prjq-f4q3-fvfr#Go/github.com/russellhaering/goxmldsig
• https://github.com/russellhaering/gosaml2/security/advisories/GHSA-prjq-f4q3-fvfr
• https://github.com/russellhaering/gosaml2/issues/59
• https://github.com/russellhaering/goxmldsig/issues/48
• https://github.com/russellhaering/gosaml2/pull/90
• https://github.com/russellhaering/gosaml2/commit/66e3b7affd622b8b24ea1e18845f045e46b23424
• https://github.com/russellhaering/gosaml2
• https://github.com/russellhaering/gosaml2/releases/tag/v0.7.0
• https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOSAML2-608302

CVE-2020-7711, CVE-2020-7731 · published 2022-11-15T19:05:07Z · modified 2026-07-08T06:49:53.037130195Z · JSON