Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.santuario/xmlsec@1.5-alpha0
Typemaven
Namespaceorg.apache.santuario
Namexmlsec
Version1.5-alpha0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.1.7
Latest_non_vulnerable_version3.0.3
Affected_by_vulnerabilities
0
url VCID-64x5-tgkj-9qb9
vulnerability_id VCID-64x5-tgkj-9qb9
summary jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2013-1207.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1207.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2013-1208.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1208.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2013-1209.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1209.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2013-1217.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1217.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2013-1218.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1218.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2013-1219.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1219.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2013-1220.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1220.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2013-1375.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1375.html
8
reference_url http://rhn.redhat.com/errata/RHSA-2013-1437.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1437.html
9
reference_url http://rhn.redhat.com/errata/RHSA-2013-1853.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1853.html
10
reference_url http://rhn.redhat.com/errata/RHSA-2014-0212.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0212.html
11
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2172.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2172.json
12
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2172
reference_id
reference_type
scores
0
value 0.05394
scoring_system epss
scoring_elements 0.90137
published_at 2026-04-21T12:55:00Z
1
value 0.05394
scoring_system epss
scoring_elements 0.90081
published_at 2026-04-01T12:55:00Z
2
value 0.05394
scoring_system epss
scoring_elements 0.90084
published_at 2026-04-02T12:55:00Z
3
value 0.05394
scoring_system epss
scoring_elements 0.90095
published_at 2026-04-04T12:55:00Z
4
value 0.05394
scoring_system epss
scoring_elements 0.901
published_at 2026-04-07T12:55:00Z
5
value 0.05394
scoring_system epss
scoring_elements 0.90115
published_at 2026-04-08T12:55:00Z
6
value 0.05394
scoring_system epss
scoring_elements 0.90121
published_at 2026-04-09T12:55:00Z
7
value 0.05394
scoring_system epss
scoring_elements 0.9013
published_at 2026-04-11T12:55:00Z
8
value 0.05394
scoring_system epss
scoring_elements 0.90129
published_at 2026-04-12T12:55:00Z
9
value 0.05394
scoring_system epss
scoring_elements 0.90123
published_at 2026-04-13T12:55:00Z
10
value 0.05394
scoring_system epss
scoring_elements 0.90141
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2172
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2172
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2172
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2172
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2172
15
reference_url http://seclists.org/fulldisclosure/2014/Dec/23
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2014/Dec/23
16
reference_url https://github.com/apache/santuario-java
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java
17
reference_url https://github.com/apache/santuario-java/commit/25e0e11493b061749f778030036cb5c406b34590
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java/commit/25e0e11493b061749f778030036cb5c406b34590
18
reference_url https://github.com/apache/santuario-java/commit/8e8f8bf92a43608d7d5f9e357fae19244454a61f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java/commit/8e8f8bf92a43608d7d5f9e357fae19244454a61f
19
reference_url https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E
22
reference_url https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2172
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2172
24
reference_url http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=1353876&r2=1493772&pathrev=1493772&diff_format=h
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=1353876&r2=1493772&pathrev=1493772&diff_format=h
25
reference_url https://web.archive.org/web/20160317145515/http://www.securityfocus.com/archive/1/534161/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20160317145515/http://www.securityfocus.com/archive/1/534161/100/0/threaded
26
reference_url https://web.archive.org/web/20200228060314/http://www.securityfocus.com/bid/60846
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200228060314/http://www.securityfocus.com/bid/60846
27
reference_url http://www.debian.org/security/2014/dsa-3065
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2014/dsa-3065
28
reference_url http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
29
reference_url http://www.ubuntu.com/usn/USN-2028-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2028-1
30
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0012.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2014-0012.html
31
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720375
reference_id 720375
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720375
32
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=999263
reference_id 999263
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=999263
33
reference_url http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc
reference_id CVE-2013-2172.TXT.ASC
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc
34
reference_url https://github.com/advisories/GHSA-r237-w2w6-jq3p
reference_id GHSA-r237-w2w6-jq3p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r237-w2w6-jq3p
35
reference_url https://access.redhat.com/errata/RHSA-2013:1207
reference_id RHSA-2013:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1207
36
reference_url https://access.redhat.com/errata/RHSA-2013:1208
reference_id RHSA-2013:1208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1208
37
reference_url https://access.redhat.com/errata/RHSA-2013:1209
reference_id RHSA-2013:1209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1209
38
reference_url https://access.redhat.com/errata/RHSA-2013:1217
reference_id RHSA-2013:1217
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1217
39
reference_url https://access.redhat.com/errata/RHSA-2013:1218
reference_id RHSA-2013:1218
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1218
40
reference_url https://access.redhat.com/errata/RHSA-2013:1219
reference_id RHSA-2013:1219
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1219
41
reference_url https://access.redhat.com/errata/RHSA-2013:1220
reference_id RHSA-2013:1220
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1220
42
reference_url https://access.redhat.com/errata/RHSA-2013:1375
reference_id RHSA-2013:1375
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1375
43
reference_url https://access.redhat.com/errata/RHSA-2013:1437
reference_id RHSA-2013:1437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1437
44
reference_url https://access.redhat.com/errata/RHSA-2013:1853
reference_id RHSA-2013:1853
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1853
45
reference_url https://access.redhat.com/errata/RHSA-2014:0212
reference_id RHSA-2014:0212
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0212
46
reference_url https://access.redhat.com/errata/RHSA-2014:0400
reference_id RHSA-2014:0400
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0400
47
reference_url https://access.redhat.com/errata/RHSA-2014:1369
reference_id RHSA-2014:1369
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1369
48
reference_url https://usn.ubuntu.com/2028-1/
reference_id USN-2028-1
reference_type
scores
url https://usn.ubuntu.com/2028-1/
fixed_packages
0
url pkg:maven/org.apache.santuario/xmlsec@1.5.5
purl pkg:maven/org.apache.santuario/xmlsec@1.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-h8wa-77tk-m3av
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.santuario/xmlsec@1.5.5
aliases CVE-2013-2172, GHSA-r237-w2w6-jq3p
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-64x5-tgkj-9qb9
1
url VCID-6q4h-4h6p-nufq
vulnerability_id VCID-6q4h-4h6p-nufq
summary Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
references
0
reference_url http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/a7758faab30d
reference_id
reference_type
scores
url http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/a7758faab30d
1
reference_url https://access.redhat.com/errata/RHSA-2014:0414
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2014:0414
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5823.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5823.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-5823
reference_id
reference_type
scores
0
value 0.04936
scoring_system epss
scoring_elements 0.89636
published_at 2026-04-21T12:55:00Z
1
value 0.04936
scoring_system epss
scoring_elements 0.89588
published_at 2026-04-01T12:55:00Z
2
value 0.04936
scoring_system epss
scoring_elements 0.89591
published_at 2026-04-02T12:55:00Z
3
value 0.04936
scoring_system epss
scoring_elements 0.89604
published_at 2026-04-04T12:55:00Z
4
value 0.04936
scoring_system epss
scoring_elements 0.89605
published_at 2026-04-07T12:55:00Z
5
value 0.04936
scoring_system epss
scoring_elements 0.89622
published_at 2026-04-08T12:55:00Z
6
value 0.04936
scoring_system epss
scoring_elements 0.89627
published_at 2026-04-09T12:55:00Z
7
value 0.04936
scoring_system epss
scoring_elements 0.89634
published_at 2026-04-11T12:55:00Z
8
value 0.04936
scoring_system epss
scoring_elements 0.89633
published_at 2026-04-12T12:55:00Z
9
value 0.04936
scoring_system epss
scoring_elements 0.89626
published_at 2026-04-13T12:55:00Z
10
value 0.04936
scoring_system epss
scoring_elements 0.89641
published_at 2026-04-16T12:55:00Z
11
value 0.04936
scoring_system epss
scoring_elements 0.89642
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-5823
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5823
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5823
5
reference_url https://github.com/apache/santuario-java/commit/55a48497dfbf3fe63a81e67c13160b3f41ebb1f3
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java/commit/55a48497dfbf3fe63a81e67c13160b3f41ebb1f3
6
reference_url https://github.com/apache/santuario-java/commit/cea3c91106fb8be35e2f1bb3f1fe0cfddd0ec710
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java/commit/cea3c91106fb8be35e2f1bb3f1fe0cfddd0ec710
7
reference_url https://github.com/apache/santuario-java/commit/f9a61f2df9473237aa71308c28113540b4063d33
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java/commit/f9a61f2df9473237aa71308c28113540b4063d33
8
reference_url https://issues.apache.org/jira/browse/SANTUARIO-334
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/SANTUARIO-334
9
reference_url https://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
10
reference_url https://marc.info/?l=bugtraq&m=138674031212883&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://marc.info/?l=bugtraq&m=138674031212883&w=2
11
reference_url https://marc.info/?l=bugtraq&m=138674073720143&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://marc.info/?l=bugtraq&m=138674073720143&w=2
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-5823
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-5823
13
reference_url https://security.gentoo.org/glsa/glsa-201406-32.xml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/glsa-201406-32.xml
14
reference_url http://svn.apache.org/viewvc?view=revision&revision=1367492
reference_id
reference_type
scores
url http://svn.apache.org/viewvc?view=revision&revision=1367492
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1019145
reference_id 1019145
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1019145
16
reference_url https://bugzilla.redhat.com/CVE-2013-5823
reference_id CVE-2013-5823
reference_type
scores
url https://bugzilla.redhat.com/CVE-2013-5823
17
reference_url https://github.com/advisories/GHSA-8gwc-x7mg-7p7p
reference_id GHSA-8gwc-x7mg-7p7p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8gwc-x7mg-7p7p
18
reference_url https://security.gentoo.org/glsa/201401-30
reference_id GLSA-201401-30
reference_type
scores
url https://security.gentoo.org/glsa/201401-30
19
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
20
reference_url https://access.redhat.com/errata/RHSA-2013:1440
reference_id RHSA-2013:1440
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1440
21
reference_url https://access.redhat.com/errata/RHSA-2013:1447
reference_id RHSA-2013:1447
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1447
22
reference_url https://access.redhat.com/errata/RHSA-2013:1451
reference_id RHSA-2013:1451
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1451
23
reference_url https://access.redhat.com/errata/RHSA-2013:1505
reference_id RHSA-2013:1505
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1505
24
reference_url https://access.redhat.com/errata/RHSA-2013:1507
reference_id RHSA-2013:1507
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1507
25
reference_url https://access.redhat.com/errata/RHSA-2013:1508
reference_id RHSA-2013:1508
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1508
26
reference_url https://access.redhat.com/errata/RHSA-2013:1793
reference_id RHSA-2013:1793
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1793
27
reference_url https://usn.ubuntu.com/2033-1/
reference_id USN-2033-1
reference_type
scores
url https://usn.ubuntu.com/2033-1/
28
reference_url https://usn.ubuntu.com/2089-1/
reference_id USN-2089-1
reference_type
scores
url https://usn.ubuntu.com/2089-1/
fixed_packages
0
url pkg:maven/org.apache.santuario/xmlsec@1.5.3
purl pkg:maven/org.apache.santuario/xmlsec@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-64x5-tgkj-9qb9
2
vulnerability VCID-h8wa-77tk-m3av
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.santuario/xmlsec@1.5.3
aliases CVE-2013-5823, GHSA-8gwc-x7mg-7p7p
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6q4h-4h6p-nufq
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.santuario/xmlsec@1.5-alpha0