Alpine/perl-xml-sig: critical 9.3
XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted.
Action: Upgrade perl-xml-sig to 0.68-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.27 | 0.68-r0 | - |
Fixed versions
| 0.68-r0 |
Sources
- osv: ALPINE-CVE-2025-40934#Alpine:v3.23/perl-xml-sig
- https://security.alpinelinux.org/vuln/CVE-2025-40934
published · modified · JSON