Search for packages
purl | pkg:maven/org.apache.santuario/xmlsec@2.0.3 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-8mkv-tade-aaam
Aliases: CVE-2023-44483 GHSA-xfrj-6vvc-3xm2 |
Apache Santuario - XML Security for Java are vulnerable to private key disclosure |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-95nw-fscc-aaaa
Aliases: CVE-2021-40690 GHSA-j8wc-gxx9-82hx |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
VCID-za5x-fm45-aaak
Aliases: CVE-2019-12400 GHSA-4q98-wr72-h35w |
Improper input validation in Apache Santuario XML Security for Java |
Affected by 2 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-xq9h-49vw-aaaa | Streaming XML Signature verification failure This package allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document. |
CVE-2014-8152
GHSA-w7cq-j9p9-hm3m |