Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.4% on proxy.golang.org
Top 0.2% dependent packages on proxy.golang.org
Top 0.2% dependent repos on proxy.golang.org
Top 2.5% forks on proxy.golang.org
Top 0.1% docker downloads on proxy.golang.org

proxy.golang.org : github.com/russellhaering/goxmldsig

Pure Go implementation of XML Digital Signatures

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/russellhaering/goxmldsig
License: Apache-2.0
Latest release: about 1 year ago
First release: over 3 years ago
Namespace: github.com/russellhaering
Dependent packages: 466
Dependent repositories: 1,514
Stars: 126 on GitHub
Forks: 108 on GitHub
Docker dependents: 547
Docker downloads: 8,390,680,394
See more repository details: repos.ecosyste.ms
Last synced: 2 days ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE1NDctZ21mOC04anI3

Signature Validation Bypass in goxmldsig
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig
Source: github
Published: almost 3 years ago

High

GSA_kwCzR0hTQS1tcXF2LWNocHgtdnEyNc4AAvL_

goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
Ecosystems: go
Packages: github.com/russellhaering/gosaml2, github.com/russellhaering/goxmldsig
Source: github
Published: over 1 year ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJyZnctaGc5bS1qNDdo

Signature Validation Bypass
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig
Source: github
Published: almost 3 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1

Critical security issues in XML encoding in github.com/dexidp/dex
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig, github.com/dexidp/dex/connector/saml, github.com/dexidp/dex
Source: github
Published: over 2 years ago