XML-Security
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| signxml | 2 | – | Jun 2, 2025 |
Exploited and recent CVEs
- CVE-2025-48995 SignXML's signature verification with HMAC is vulnerable to a timing attack 0.2%
- CVE-2025-48994 SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack 0.2%