russellhaering goxmldsig

• CVE-2026-33487 High 7.5 goxmldsig has validateSignature Loop Variable Capture Signature Bypass 0.3%
• CVE-2020-15216 Medium 5.3 Signature Validation Bypass in goxmldsig 0.9%