XML-Security signxml

• CVE-2025-48995 Medium 6.9 SignXML's signature verification with HMAC is vulnerable to a timing attack 0.2%
• CVE-2025-48994 Medium 6.9 SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack 0.2%