Go/github.com/russellhaering/goxmldsig: critical

Signature Validation Bypass

Action: Upgrade github.com/russellhaering/goxmldsig to 0.4.2 or later.

go get github.com/russellhaering/goxmldsig@v0.4.2

Affected

Fixed versions

Sources

• osv: GHSA-rrfw-hg9m-j47h
• https://github.com/crewjam/saml/security/advisories/GHSA-rrfw-hg9m-j47h
• https://github.com/russellhaering/goxmldsig

published 2021-05-24T16:59:42Z · modified 2021-10-08T21:25:26Z · JSON