russellhaering

Products

ProductCVEsExploitedLatest
goxmldsig2–Mar 26, 2026
gosaml21–Mar 3, 2023

Exploited and recent CVEs

  • CVE-2026-33487 High 7.5 goxmldsig has validateSignature Loop Variable Capture Signature Bypass 0.3%
  • CVE-2023-26483 Medium 5.3 gosaml2 vulnerable to Denial of Service via deflate decompression bomb 1.0%
  • CVE-2020-15216 Medium 5.3 Signature Validation Bypass in goxmldsig 0.9%