Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

signxml — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in signxml, with AI-generated Chinese analysis, references, and POCs.

Vendor: XML-Security

CVE IDTitleCVSSSeverityPublished
CVE-2025-48995 SignXML's signature verification with HMAC is vulnerable to a timing attack CWE-208 5.9AIMediumAI2025-06-02
CVE-2025-48994 SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack CWE-303 9.1AICriticalAI2025-06-02

All 2 known CVE vulnerabilities affecting signxml with full Chinese analysis, references, and POCs where available.