Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

XML-Sig

cpan

A toolkit to help sign and verify XML Digital Signatures.

View on github.com · View on metacpan.org

Security Advisories for XML-Sig in cpan

High
about 1 month ago

XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check. CPANSA-XML-Sig-2026-18568

cpan XML-Sig
Critical
about 1 month ago

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. CPANSA-XML-Sig-2026-9487

cpan XML-Sig
Critical
about 1 month ago

XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. CPANSA-XML-Sig-2026-9390

cpan XML-Sig
9 months ago

XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted. An attacker can remove the signature from the XML document to make it pass the verification check. XML-Sig is a Perl module to validate signatures ... CPANSA-XML-Sig-2025-40934

cpan XML-Sig

Filter by Severity

Critical 2 High 1