Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/xmlsec1@1.2.12-1?distro=trixie
purl pkg:deb/debian/xmlsec1@1.2.12-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-z7ht-bq8z-3qgd XML signature HMAC truncation authentication bypass This package uses a parameter that defines an HMAC truncation length (`HMACOutputLength`) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits. CVE-2009-0217
GHSA-8hfm-837h-hjg5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:34:15.562074+00:00 Debian Importer Fixing VCID-z7ht-bq8z-3qgd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:08:24.514619+00:00 Debian Importer Fixing VCID-z7ht-bq8z-3qgd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:58:44.728027+00:00 Debian Importer Fixing VCID-z7ht-bq8z-3qgd https://security-tracker.debian.org/tracker/data/json 38.1.0