Go/github.com/moov-io/signedxml CVE-2023-34205: unknown, EPSS 0.39%

Signature validation bypass in github.com/moov-io/signedxml

Action: Upgrade github.com/moov-io/signedxml to 1.1.0 or later.

go get github.com/moov-io/signedxml@v1.1.0

Affected

Fixed versions

Sources

• osv: GO-2023-1826
• https://github.com/moov-io/signedxml/issues/23

CVE-2023-34205 · published 2023-06-09T15:42:52Z · modified 2024-05-20T16:03:47Z · JSON