{"action":"Upgrade github.com/russellhaering/goxmldsig to 0.4.2 or later.","affected":[{"fixed":"0.4.2","introduced":"0"}],"component":"github.com/russellhaering/goxmldsig","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.4.2"],"ghsa_id":"GHSA-rrfw-hg9m-j47h","id":"tcs_01M5KFN7DECB5CWQ5MRX8Y6WZ0","modified_at":"2021-10-08T21:25:26Z","published_at":"2021-05-24T16:59:42Z","references":["https://osv.dev/vulnerability/GHSA-rrfw-hg9m-j47h","https://github.com/crewjam/saml/security/advisories/GHSA-rrfw-hg9m-j47h","https://github.com/russellhaering/goxmldsig"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-rrfw-hg9m-j47h","url":"https://osv.dev/vulnerability/GHSA-rrfw-hg9m-j47h"}],"summary":"Signature Validation Bypass"}