Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.santuario/xmlsec@1.4.2
purl pkg:maven/org.apache.santuario/xmlsec@1.4.2
Tags Ghost
Next non-vulnerable version 2.1.7
Latest non-vulnerable version 3.0.3
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-z7ht-bq8z-3qgd
Aliases:
CVE-2009-0217
GHSA-8hfm-837h-hjg5
XML signature HMAC truncation authentication bypass This package uses a parameter that defines an HMAC truncation length (`HMACOutputLength`) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
1.4.3
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:46:45.649051+00:00 GitLab Importer Affected by VCID-z7ht-bq8z-3qgd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.santuario/xmlsec/CVE-2009-0217.yml 38.0.0