Data

Tools

Indexes

Applications

Experiments

Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.4% on proxy.golang.org
Top 0.2% dependent packages on proxy.golang.org
Top 0.2% dependent repos on proxy.golang.org
Top 2.5% forks on proxy.golang.org
Top 0.1% docker downloads on proxy.golang.org

proxy.golang.org : github.com/russellhaering/goxmldsig

Pure Go implementation of XML Digital Signatures

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/russellhaering/goxmldsig
License: Apache-2.0
Latest release: about 1 month ago
First release: over 4 years ago
Namespace: github.com/russellhaering
Dependent packages: 466
Dependent repositories: 1,514
Stars: 126 on GitHub
Forks: 108 on GitHub
Docker dependents: 547
Docker downloads: 8,390,682,563
See more repository details: repos.ecosyste.ms
Last synced: about 3 hours ago

High
GSA_kwCzR0hTQS1tcXF2LWNocHgtdnEyNc4AAvL_
goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
Ecosystems: go
Packages: github.com/russellhaering/gosaml2, github.com/russellhaering/goxmldsig
Source: github
Published: over 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdxNXItY2M0dy1nOHhm
Duplicate Advisory: gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig, github.com/russellhaering/gosaml2
Source: github
Published: almost 4 years ago
Withdrawn: 11 months ago
High
GSA_kwCzR0hTQS1wcmpxLWY0cTMtZnZmcs4AAv43
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig, github.com/russellhaering/gosaml2
Source: github
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJyZnctaGc5bS1qNDdo
Signature Validation Bypass
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig
Source: github
Published: almost 4 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1
Critical security issues in XML encoding in github.com/dexidp/dex
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig, github.com/dexidp/dex
Source: github
Published: over 3 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE1NDctZ21mOC04anI3
github.com/russellhaering/goxmldsig vulnerable to Signature Validation Bypass
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig
Source: github
Published: almost 4 years ago