Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libxml-security-java@1.5.5-2?distro=trixie
purl pkg:deb/debian/libxml-security-java@1.5.5-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-64x5-tgkj-9qb9 jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature." CVE-2013-2172
GHSA-r237-w2w6-jq3p

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:30:56.053256+00:00 Debian Importer Fixing VCID-64x5-tgkj-9qb9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:50:54.709044+00:00 Debian Importer Fixing VCID-64x5-tgkj-9qb9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:30:02.916088+00:00 Debian Importer Fixing VCID-64x5-tgkj-9qb9 https://security-tracker.debian.org/tracker/data/json 38.1.0